How to generate nonce from client-side Javascript

[codinghorror (Jeff Atwood)]

I’d definitely follow our official SSO guide first Official Single-Sign-On for Discourse (sso)