From fe0083fb2b9a0d0590d76d915797aaae2bb43f60 Mon Sep 17 00:00:00 2001
From: Enis Afgan <afgane@gmail.com>
Date: Thu, 17 Mar 2022 12:23:23 -0400
Subject: [PATCH] Add nonce mismatch hint to exception msg

---
 lib/galaxy/authnz/custos_authnz.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/galaxy/authnz/custos_authnz.py b/lib/galaxy/authnz/custos_authnz.py
index 6a82db7243d..9d0db4d452a 100644
--- a/lib/galaxy/authnz/custos_authnz.py
+++ b/lib/galaxy/authnz/custos_authnz.py
@@ -277,7 +277,7 @@ class CustosAuthnz(IdentityProvider):
         trans.set_cookie("", name=NONCE_COOKIE_NAME, age=-1)
         nonce_cookie_hash = self._hash_nonce(nonce_cookie)
         if nonce_hash != nonce_cookie_hash:
-            raise Exception("Nonce mismatch!")
+            raise Exception("Nonce mismatch. Check that configured redirect_uri matches the URL you are using.")
 
     def _load_config_for_cilogon(self):
         # Set cilogon endpoints