#NEWLINE# def parse_authentication_response( self , session , query_string ) : #NEWLINE# #INDENT# auth_response = session [ 'client' ] . parse_response ( AuthorizationResponse , info = query_string , sformat = 'urlencoded' ) #NEWLINE# if ( auth_response [ 'state' ] != session [ 'state' ] ) : #NEWLINE# #INDENT# raise 'The OIDC state does not match.' #NEWLINE# #UNINDENT# if ( ( 'id_token' in auth_response ) and ( auth_response [ 'id_token' ] [ 'nonce' ] != session [ 'nonce' ] ) ) : #NEWLINE# #INDENT# raise 'The OIDC nonce does not match.' #NEWLINE# #UNINDENT# return session