2
79%
master: 85%

Ran 16 Dec 2025 01:11PM UTC

Files 134

Run time 6s

Badge

Embed ▾

Committed 16 Dec 2025 12:38PM UTC coverage: 78.794% (-6.7%) from 85.506%

Job # 7d392f0e79f4da405dae0d84eb9d6ecbc31942f4-PR-56.2

Build Type

Pull #56

github

Committed by

metemaad

Commit Message

fix: only include nonce claim in id_token when provided in auth request

When no nonce is sent in the authorization request (nonce is nil or empty
string), the id_token should not include the nonce claim. Including an empty
nonce causes validation failures with some OIDC relying parties.

Per OIDC Core spec section 2, the nonce claim is optional and should only
be present if a nonce was sent in the authentication request.

This fixes issues with AWS ALB OIDC authentication, which does not send
a nonce parameter but validates the id_token and fails when an empty
nonce claim is present.

Changes:
- Modified maybe_put_nonce helper to skip nonce claim when nil or empty
- Added tests for nonce handling (nil, empty string, and valid nonce)

Pull Request Pull Request #56: fix: only include nonce claim in id_token when provided in auth request

Coverage Stats

1464 of 1858 relevant lines covered (78.79%)

138.15 hits per line

malach-it / boruta_auth / 7d392f0e79f4da405dae0d84eb9d6ecbc31942f4-PR-56 / 2
79%
master: 85%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 7d392f0e79f4da405dae0d84eb9d6ecbc31942f4-PR-56.2

malach-it / boruta_auth / 7d392f0e79f4da405dae0d84eb9d6ecbc31942f4-PR-56 / 2 79% master: 85%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 7d392f0e79f4da405dae0d84eb9d6ecbc31942f4-PR-56.2

malach-it / boruta_auth / 7d392f0e79f4da405dae0d84eb9d6ecbc31942f4-PR-56 / 2
79%
master: 85%

README BADGES
x