whs-authz-authn/oauth-backend
1
0
Fork 0
mirror of https://github.com/j93es/oauth-backend.git synced 2026-06-04 05:21:51 +09:00
Code Issues Projects Releases Packages Wiki Activity

[Refactor] 리팩터링

Browse source
This commit is contained in:
tv0924@icloud.com 2025-06-26 10:43:52 +09:00
commit 062552d3d8
12 changed files with 24 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

6
addon/nonce_check.py
View file

@ -3,8 +3,8 @@ from urllib.parse import urlparse, parse_qs
from typing import Union
import httpx
import lib.target as target
from lib.report import save_report
import lib.cur_target_url as cur_target_url
from lib.report_vuln import save_report
class NonceChecker:
def is_oidc_flow(self, flow) -> bool:
@ -76,7 +76,7 @@ class NonceChecker:
url = req.pretty_url
if not nonce:
report_data = [{
'target': target.load(),
'target': cur_target_url.load(),
'status': "CRITICAL",
'title': "nonce is missing in id_token",
'description': "Nonce is present in the request but missing in the id_token.",