diff --git a/crates/oidc-client/src/requests/authorization_code.rs b/crates/oidc-client/src/requests/authorization_code.rs index 850813d8b..9f3b75e4c 100644 --- a/crates/oidc-client/src/requests/authorization_code.rs +++ b/crates/oidc-client/src/requests/authorization_code.rs @@ -191,6 +191,7 @@ pub struct AuthorizationValidationData { pub state: String, /// A string to mitigate replay attacks. + /// Used when the `openid` scope is set (and therefore we are using OpenID Connect). pub nonce: Option, /// The URI where the end-user will be redirected after authorization.