Use request.nonce when generating hybrid id token

Like with the implicit grant, we need to override add_id_token to pass
the nonce from the current request to GrantBase.add_id_token in order
for the ID token to have the correct nonce.

Add test that the nonce is in ID token from hybrid OIDC flow.

Fixes: #746

1 files changed, 1 insertions, 0 deletions

diff --git a/AUTHORS b/AUTHORS
index f52ce9a..bbffe14 100644
--- a/AUTHORS
+++ b/AUTHORS
@@ -29,3 +29,4 @@ Brendan McCollam
 Jonathan Huot
 Pieter Ennes
 Olaf Conradi
+Tom Evans