Merge pull request #1000 from Rocket18/issue/993

disableOAuth2StateCheck before calling validateNonce() in code flow

Author: manfredsteyer

projects/lib/src/oauth-service.ts

@@ -1734,14 +1734,15 @@ export class OAuthService extends AuthConfig implements OnDestroy {
         return Promise.resolve();
       }
 
+    if(!options.disableOAuth2StateCheck) {
       const success = this.validateNonce(nonceInState);
       if (!success) {
         const event = new OAuthErrorEvent('invalid_nonce_in_state', null);
         this.eventsSubject.next(event);
         return Promise.reject(event);
       }
     }
-
+    
     this.storeSessionState(sessionState);
 
     if (code) {