{"action":"created","issue":{"url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/3517","repository_url":"https://api.github.com/repos/swagger-api/swagger-ui","labels_url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/3517/labels{/name}","comments_url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/3517/comments","events_url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/3517/events","html_url":"https://github.com/swagger-api/swagger-ui/issues/3517","id":247701744,"node_id":"MDU6SXNzdWUyNDc3MDE3NDQ=","number":3517,"title":"nonce query parameter not sent in case of oidc implicit flow","user":{"login":"SzymonKlimuk","id":26740696,"node_id":"MDQ6VXNlcjI2NzQwNjk2","avatar_url":"https://avatars3.githubusercontent.com/u/26740696?v=4","gravatar_id":"","url":"https://api.github.com/users/SzymonKlimuk","html_url":"https://github.com/SzymonKlimuk","followers_url":"https://api.github.com/users/SzymonKlimuk/followers","following_url":"https://api.github.com/users/SzymonKlimuk/following{/other_user}","gists_url":"https://api.github.com/users/SzymonKlimuk/gists{/gist_id}","starred_url":"https://api.github.com/users/SzymonKlimuk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SzymonKlimuk/subscriptions","organizations_url":"https://api.github.com/users/SzymonKlimuk/orgs","repos_url":"https://api.github.com/users/SzymonKlimuk/repos","events_url":"https://api.github.com/users/SzymonKlimuk/events{/privacy}","received_events_url":"https://api.github.com/users/SzymonKlimuk/received_events","type":"User","site_admin":false},"labels":[{"id":631586805,"node_id":"MDU6TGFiZWw2MzE1ODY4MDU=","url":"https://api.github.com/repos/swagger-api/swagger-ui/labels/cat:%20auth","name":"cat: auth","color":"c5def5","default":false},{"id":46110685,"node_id":"MDU6TGFiZWw0NjExMDY4NQ==","url":"https://api.github.com/repos/swagger-api/swagger-ui/labels/type:%20feature","name":"type: feature","color":"c2e0c6","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2017-08-03T13:11:59Z","updated_at":"2018-12-06T20:07:41Z","closed_at":null,"author_association":"NONE","body":"- swagger-ui version 3.0.17 and 3.1.2\r\n\r\nHello, we are testing swagger ui with authentication on keycloak. When using implicit flow, keycloak returns error because it expects nonce parameter in the query.\r\n\r\nAs described here: \r\nhttp://openid.net/specs/openid-connect-core-1_0.html#ImplicitFlowSteps\r\n\r\nnonce is REQUIRED.\r\n\r\nI think for the swagger ui it may be any random nonce (no pass our tests we added dummy nonce=1234)\r\n\r\nSo I think the solution would be to add:\r\n\r\nquery.push(\"nonce=\" + <anything that matches>)\r\n\r\nin\r\n\r\noauth2-authorize.js\r\n\r\nin case of implicit flow.\r\n\r\nRegards,\r\n\r\nSzymon Klimuk\r\n"},"comment":{"url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/comments/445012295","html_url":"https://github.com/swagger-api/swagger-ui/issues/3517#issuecomment-445012295","issue_url":"https://api.github.com/repos/swagger-api/swagger-ui/issues/3517","id":445012295,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0NTAxMjI5NQ==","user":{"login":"wlami","id":564295,"node_id":"MDQ6VXNlcjU2NDI5NQ==","avatar_url":"https://avatars2.githubusercontent.com/u/564295?v=4","gravatar_id":"","url":"https://api.github.com/users/wlami","html_url":"https://github.com/wlami","followers_url":"https://api.github.com/users/wlami/followers","following_url":"https://api.github.com/users/wlami/following{/other_user}","gists_url":"https://api.github.com/users/wlami/gists{/gist_id}","starred_url":"https://api.github.com/users/wlami/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wlami/subscriptions","organizations_url":"https://api.github.com/users/wlami/orgs","repos_url":"https://api.github.com/users/wlami/repos","events_url":"https://api.github.com/users/wlami/events{/privacy}","received_events_url":"https://api.github.com/users/wlami/received_events","type":"User","site_admin":false},"created_at":"2018-12-06T20:07:41Z","updated_at":"2018-12-06T20:07:41Z","author_association":"NONE","body":"> OIDC is currently _not_ supported in Swagger-UI. It will be introduced with the official support for OAS3 with its internal OIDC support.\r\n\r\nAs far as I understand there is support for OAS 3.0 in Swagger UI 3.18.3. However, OIDC is not yet implemented. Is it being worked on/ is there a roadmap when OIDC support will come? If not, are you open for contributions on this feature?"}}
{"actor":{"display_login":"wlami"}}