https://www.ory.com/ logo
Join Slack
Powered by
Hello! :wave: We’ve identified a spec compliance...
# general
l
Hello! 👋 We’ve identified a spec compliance issue in Hydra related to JWT Request Objects and 
nonce
handling. In short: when 
nonce
is provided as a query parameter but not included in the JWT, it gets dropped, and the issued ID token ends up without a 
nonce
(OIDC Core §6.3.3 violation). We’ve opened an issue with details and repro steps here: https://github.com/ory/hydra/issues/4069 Would appreciate a look or guidance on the best way forward. Many thanks in advance! 🚀
👀 2
Any updates on this @early-magician-18981 @blue-knife-89618?
We raised the same question at Feb 19 https://ory-community.slack.com/archives/C010F7Z4XM1/p1771499722748859 but no one gave any feedback. Is the Contribute code still relevant?
Copy code
Open a Discussion or Issue describing the problem and your proposed solution.
Wait for maintainer feedback and explicit agreement on the implementation approach.
e
Contributions are always welcome here, issues and PRs alike, so this is the kind of report we want coming in. One bit of honesty on timing: the team is focused on commercial customer work right now, so community issues get picked up as bandwidth frees up rather than on a set timeline. If you're a commercial customer, the fastest path is to open a support ticket so it gets prioritized against your account. Either way, I've forwarded #4069 along to the team. I'll follow up here once I have a read on when it can get a proper look.
👑 1
Open in Slack
PreviousNext
Powered by