git.iko.soy/typeable/oauth2-proxy
on master help sign in
ADFS supports IDToken nonce, use it
1621ea3Nick Meves
providers/adfs.go+1−1
@@ -48,7 +48,7 @@ func NewADFSProvider(p *ProviderData) *ADFSProvider {
48
48
49 oidcProvider := &OIDCProvider{
49 oidcProvider := &OIDCProvider{
50 ProviderData: p,
50 ProviderData: p,
51− SkipNonce: true,
51+ SkipNonce: false,
52 }
52 }
53
53
54 return &ADFSProvider{
54 return &ADFSProvider{