Update nonce_check.py

addon/nonce_check.py

@@ -40,15 +40,14 @@ class NonceChecker:
         """
         res = flow.response
         # 1. JSON 응답에 id_token 있음
-        try:
         if "application/json" in res.headers.get("content-type", ""):
+            try:
                 data = res.json()
                 return data.get("id_token")
-            else:
-                return None
             except Exception:
                 pass
 
+
         # 2. Location 헤더에서 id_token 파싱 (예: #id_token=...&access_token=...)
         location = res.headers.get("location", "")
         if location:
@@ -66,7 +65,7 @@ class NonceChecker:
 
     def decode_id_token(self, flow) -> dict:
         res = flow.response
-        id_token = self.extract_id_token(res)
+        id_token = self.extract_id_token(flow)
         if not id_token:
             return {}
         try:
@@ -85,12 +84,12 @@ class NonceChecker:
         parsed = urlparse(url)
         fragment_params = parse_qs(parsed.fragment)
 
-        if "id token" in fragment_params:
+        if "id_token" in fragment_params:
             # id_token이 fragment에 있는 경우
-            id_token = fragment_params["id token"][0]
+            id_token = fragment_params["id_token"][0]
             return True
 
-        id_token = self.extract_id_token(res)
+        id_token = self.extract_id_token(flow)
         decoded = self.decode_id_token(id_token)
         nonce = decoded.get("nonce")