nonceCheck

oidc flow인지 확인하고 id token을 디코딩한 후 nonce의 유무를 확인한다

addon/init.py

@@ -3,6 +3,7 @@ import asyncio
 from pkce_check import PKCEDowngradeChecker
 from ScopeDetection import ScopeDetection
 from csrf_check import CsrfChecker
+from nonce_check import NonceChecker
 
 class PKCEAddon:
     def __init__(self):
@@ -49,4 +50,15 @@ class ScopeAddon:
         except Exception as e:
             print(f"[ERROR] ScopeDetection failed: {e}")
 
-addons = [PKCEAddon(), ScopeAddon(), CsrfAddon()]
+class NonceAddon:
+    def __init__(self):
+        self.checker = NonceChecker()
+
+    async def response(self, flow: http.HTTPFlow):
+        try:
+            await self.checker.response(flow)
+        except Exception as e:
+            print(f"[ERROR] NonceAddon failed: {e}")
+            pass
+
+addons = [PKCEAddon(), ScopeAddon(), CsrfAddon(), NonceAddon()]