fixed nonce cookie handling

12 years ago · 269c2c9835
1 changed files with 1 additions and 1 deletions
--- a/openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCSignedRequestFilter.java
+++ b/openid-connect-client/src/main/java/org/mitre/openid/connect/client/OIDCSignedRequestFilter.java
@ -118,7 +118,7 @@ public class OIDCSignedRequestFilter extends AbstractOIDCAuthenticationFilter {
 		response.addCookie(nonceCookie);
-		claims.setClaim("nonce", nonceCookie);
+		claims.setClaim("nonce", nonce);
 		try {
 			signingAndValidationService.signJwt(jwt);