Merge branch '1-nonce-required-for-oidc-implicit-flow' into 'master'

Add nonce to auth request - required for oidc implicit

Closes #1

See merge request !2

lib/jso.js

@@ -1185,7 +1185,9 @@ define('jso',['require','exports','module','./store','./utils','./Config'],funct
       request.response_type = opts.response_type;
     }
 
-
+		if (request.response_type.split(/\s+/).includes("id_token")) {
+			request.nonce = utils.uuid()
+		}
 
 		if (callback && typeof callback === 'function') {
 			utils.log("About to store a callback for later with state=" + request.state, callback);