Clarification about nonce

[cmarco0]

Explaination of Nonce value

Nonce can be any value, and its encrypted payload with an expiration time prevents storing and reusing expired nonces.

The security and configuration of the nonce_endpoint can vary. While a standard configuration might not require client authentication, it is possible to protect this endpoint to enhance the overall security of the system.

Explaination of Nonce Payload claims

• source_endpoint claim specifies which specific endpoint (or URL) within the federation created or issued the nonce.
• aud claim refers to the intended recipient or the endpoint that is supposed to use or process the nonce.