require session[:nonce] to mitigate CSRF attack at token endpoint
require session[:nonce] to mitigate CSRF attack at token endpoint

nov/openid_connect_sample_rp,nov/openid_connect_sample_rp,nov/openid_connect_sample_rp