zitadel / oidc

Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation
https://zitadel.com
Apache License 2.0
1.33k stars 138 forks source link

fix: Handle case where verifier Nonce func is nil #594

Closed ymarcus93 closed 4 months ago

ymarcus93 commented 4 months ago

The Nonce func in IDTokenVerifier can technically be set to nil. We don't want to panic by calling a nil func. So I've updated the VerifyIDToken func to skip the nonce claim check if the func is nil.

Definition of Ready

github-actions[bot] commented 4 months ago

:tada: This PR is included in version 3.23.1 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: