mirror of
https://github.com/advplyr/audiobookshelf.git
synced 2026-03-01 05:29:41 +00:00
a6848065e1
Some IdPs (e.g. Authentik) don't echo the nonce in the id_token for the authorization code flow, causing "nonce mismatch, got: undefined" errors when the mobile app attempts SSO login. The mobile flow already uses PKCE which provides equivalent replay protection, so nonce is not needed. Web flow continues to use nonce for defense-in-depth. |
||
|---|---|---|
| .. | ||
| auth | ||
| controllers | ||
| finders | ||
| managers | ||
| migrations | ||
| objects | ||
| providers | ||
| utils | ||
| Logger.test.js | ||