diff --git a/oidc_provider/lib/endpoints/token.py b/oidc_provider/lib/endpoints/token.py index 191a3f4..416d17e 100644 --- a/oidc_provider/lib/endpoints/token.py +++ b/oidc_provider/lib/endpoints/token.py @@ -33,7 +33,6 @@ class TokenEndpoint(object): self.params.grant_type = query_dict.get('grant_type', '') self.params.code = query_dict.get('code', '') self.params.state = query_dict.get('state', '') - self.params.nonce = query_dict.get('nonce', '') def validate_params(self): if not (self.params.grant_type == 'authorization_code'): @@ -72,7 +71,7 @@ class TokenEndpoint(object): id_token_dic = create_id_token( user=self.code.user, aud=self.client.client_id, - nonce=self.params.nonce, + nonce=self.code.nonce, ) token = create_token(