fix: do not require nonce parameter in OpenID (#1253)

* change require_nonce=False, checks for None

* check for None

* Deleted None for get nonce

authn/models/openid.py

@@ -145,7 +145,7 @@ def get_scope(self):
         return self.scope or ""
 
     def get_nonce(self):
-        return self.nonce
+        return self.nonce if self.nonce else None
 
     def get_auth_time(self):
         return self.auth_time.timestamp()

authn/providers/openid.py

@@ -64,6 +64,8 @@ def revoke_old_credential(self, credential):
 
 class OpenIDCode(oidc_grants.OpenIDCode):
     def exists_nonce(self, nonce, request):
+        if nonce is None:
+            return False
         try:
             OAuth2AuthorizationCode.objects.get(
                 client_id=request.client_id, nonce=nonce
@@ -95,6 +97,6 @@ class OpenIDImplicitGrant(OpenIDCode, oidc_grants.OpenIDImplicitGrant):
     pass
 
 
-server.register_grant(AuthorizationCodeGrant, [OpenIDCode(require_nonce=True)])
+server.register_grant(AuthorizationCodeGrant, [OpenIDCode(require_nonce=False)])
 server.register_grant(OpenIDImplicitGrant)
 server.register_grant(RefreshTokenGrant)