Added a field to the user JWT that disables nonce verification when set.

[aricart]

This field will be referenced by the server to allow it to decide whether to ignore nonce signatures.

[coveralls]

Pull Request Test Coverage Report for Build 316

• 1 of 4 (25.0%) changed or added relevant lines in 1 file are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage decreased (-0.2%) to 88.88%

---

Changes Missing Coverage	Covered Lines	Changed/Added Lines	%
user_claims.go	1	4	25.0%

Totals
Change from base Build 299:	-0.2%
Covered Lines:	1063
Relevant Lines:	1196

---

💛 - Coveralls

[kozlovic]

Technically LGTM... need to check with Derek if we want this or not..

[derekcollison]

I don't see that change, just travis and staticcheck stuff.

However, for this, I don't think the JWT can make that determination, its a policy thing and one that the servers have to enforce IMO.

[aricart]

I don't see that change, just travis and staticcheck stuff.

However, for this, I don't think the JWT can make that determination, its a policy thing and one that the servers have to enforce IMO.

Yes the server has to enforce.

[kozlovic]

LGTM