feat: add "nonce" into the OAuth and OIDC tokens, for some apps require "nonce" to integrate (#2522)

This commit is contained in:
Nex Zhu
2023-12-01 18:29:39 +08:00
committed by GitHub
parent a5f9f61381
commit badfe34755
2 changed files with 4 additions and 3 deletions

View File

@ -754,13 +754,13 @@ func GetClientCredentialsToken(application *Application, clientSecret string, sc
// GetTokenByUser
// Implicit flow
func GetTokenByUser(application *Application, user *User, scope string, host string) (*Token, error) {
func GetTokenByUser(application *Application, user *User, scope string, nonce string, host string) (*Token, error) {
err := ExtendUserWithRolesAndPermissions(user)
if err != nil {
return nil, err
}
accessToken, refreshToken, tokenName, err := generateJwtToken(application, user, "", scope, host)
accessToken, refreshToken, tokenName, err := generateJwtToken(application, user, nonce, scope, host)
if err != nil {
return nil, err
}