‘Nonce’ value is changing and displaying in HEADER rather than PAYLOAD data in token verification

Hi all,

I am implementing the Appauth (OIDC login) in our iOS app and following the same repo methods described below. I am passing the ‘Nonce’ value from our end and displayed the same nonce in generated request also but nonce is changing between the request and the response as well displaying it in the HEADER section

Below OIDAuthorizationRequest method I am using to generate the JWT token.

Request:


let request = OIDAuthorizationRequest(configuration: configuration,
clientId: self.clientID,
clientSecret: nil,
scope: OIDScopeOpenID,
redirectURL: URL(string: self.kRedirectUri)!,
responseType: OIDResponseTypeCode,
state: state,
nonce: nonce,
codeVerifier: codeverifier,
codeChallenge: codeChallenge,
codeChallengeMethod: OIDOAuthorizationRequestCodeChallengeMethodS256,
additionalParameters: nil)

I am getting the JWT token in the success handler and validating it on https://jwt.io/ and found the issue as above (‘Nonce’ is replaced and displayed in HEADER rather than PAYLOAD data). I have posted the Ref. image for a better understanding. Any help will be appreciated, thank you in advance.

Start with the OIDAuthorizationRequest construction shown in the issue and the success handler that receives the JWT. Compare the request nonce with the returned token claims and check the identity provider's OIDC behavior; done means determining whether AppAuth-iOS or the provider is responsible and documenting a reproducible resolution.