Add test for nonce parameter preservation.

1 files changed, 12 insertions, 0 deletions

diff --git a/tests/oauth2/rfc6749/endpoints/test_prompt_handling.py b/tests/oauth2/rfc6749/endpoints/test_openid_connect_params_handling.py
index 35e1508..89431b6 100644
--- a/tests/oauth2/rfc6749/endpoints/test_prompt_handling.py
+++ b/tests/oauth2/rfc6749/endpoints/test_openid_connect_params_handling.py
@@ -29,6 +29,8 @@ class OpenIDConnectEndpointTest(TestCase):
                                               response_types={'code': grant})
         params = {
             'prompt': 'consent',
+            'display': 'touch',
+            'nonce': 'abcd',
             'state': 'abc',
             'redirect_uri': 'https://a.b/cb',
             'response_type': 'code',
@@ -71,3 +73,13 @@ class OpenIDConnectEndpointTest(TestCase):
         url = 'http://a.b/path?' + urlencode(params)
         with self.assertRaises(InvalidRequestError):
             self.endpoint.validate_authorization_request(url)
+
+    def test_oidc_params_preservation(self):
+        """
+        Test that the nonce parameter is passed through.
+        """
+        scopes, creds = self.endpoint.validate_authorization_request(self.url)
+
+        self.assertEqual(creds['prompt'], {'consent'})
+        self.assertEqual(creds['nonce'], 'abcd')
+        self.assertEqual(creds['display'], 'touch')