fix: Verified ID token is optional. Was assumed for nonce and state d…

…etermenation
Sphereon-Opensource · Feb 29, 2024 · 65f5273 · 65f5273
1 parent 5d8648a
commit 65f5273
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/authorization-response/AuthorizationResponse.ts b/src/authorization-response/AuthorizationResponse.ts
@@ -137,8 +137,8 @@ export class AuthorizationResponse {
     const verifiedIdToken = await this.idToken?.verify(verifyOpts);
     const oid4vp = await verifyPresentations(this, verifyOpts);
 
-    const nonce = merged.nonce ?? verifiedIdToken.payload.nonce ?? oid4vp.nonce;
-    const state = merged.state ?? verifiedIdToken.payload.state;
+    const nonce = merged.nonce ?? oid4vp.nonce ?? verifiedIdToken?.payload.nonce;
+    const state = merged.state ?? verifiedIdToken?.payload.state;
 
     if (!state) {
       throw Error(`State is required`);