omab / python-social-auth

Social auth made simple
http://psa.matiasaguirre.net
BSD 3-Clause "New" or "Revised" License
2.83k stars 1.09k forks source link

Nonces not removed by OpenIdConnectAuth #970

Closed clintonb closed 7 years ago

clintonb commented 8 years ago

When the OpenIdConnectAuth backend makes a call to authorize a request, it creates a nonce. Once a response is received, this nonce should be removed from the database (e.g. Association table for Django). The backend does not currently do this, resulting in a table that grows without bound.

omab commented 7 years ago

Should be fixed by now.