diff --git a/changelog.md b/changelog.md index 709a7b8..86871ff 100644 --- a/changelog.md +++ b/changelog.md @@ -4,7 +4,10 @@ **3.2.0** * Feature: @robbiepaul - trigger core action `wp_login` when user is logged in through this plugin -* Feature: @moriyoshi - Determine the WP_User display name with replacement tokens on the settings page. Tokens can be any property of the user_claim. +* Feature: @moriyoshi - Determine the WP_User display name with replacement tokens on the settings page. Tokens can be any property of the user_claim. +* Feature: New setting to set redirect URL when session expires. +* Feature: @robbiepaul - New filter for modifying authentication URL +* Fix: @cedrox - Adding id_token_hint to logout URL according to spec * Bug fix: Provide port to the request header when requesting the user_claim **3.1.0** diff --git a/includes/openid-connect-generic-client-wrapper.php b/includes/openid-connect-generic-client-wrapper.php index 3b81161..b544da2 100644 --- a/includes/openid-connect-generic-client-wrapper.php +++ b/includes/openid-connect-generic-client-wrapper.php @@ -264,10 +264,10 @@ class OpenID_Connect_Generic_Client_Wrapper { } $user_id = wp_get_current_user()->ID; - $token_response = get_user_meta( $user_id, 'openid-connect-generic-last-token-response', true ); - $id_token_hint = $token_response['id_token']; - $url .= 'id_token_hint='.$id_token_hint.'&post_logout_redirect_uri=' . urlencode( $redirect_url ); - return $url; + $token_response = get_user_meta( $user_id, 'openid-connect-generic-last-token-response', true ); + $id_token_hint = $token_response['id_token']; + $url .= 'id_token_hint='.$id_token_hint.'&post_logout_redirect_uri=' . urlencode( $redirect_url ); + return $url; } /** diff --git a/openid-connect-generic.php b/openid-connect-generic.php index 2b77586..01dd127 100644 --- a/openid-connect-generic.php +++ b/openid-connect-generic.php @@ -22,14 +22,17 @@ Notes - openid-connect-generic-auth-url - modify the authentication url Actions - - openid-connect-generic-user-create - 2 args: fires when a new user is created by this plugin + - openid-connect-generic-user-create - 2 args: fires when a new user is created by this plugin + - openid-connect-generic-user-update - 1 arg: user ID, fires when user is updated by this plugin - openid-connect-generic-update-user-using-current-claim - 2 args: fires every time an existing user logs + - openid-connect-generic-redirect-user-back - 2 args: $redirect_url, $user. Allows interruption of redirect during login. User Meta - openid-connect-generic-user - (bool) if the user was created by this plugin - openid-connect-generic-subject-identity - the identity of the user provided by the idp - openid-connect-generic-last-id-token-claim - the user's most recent id_token claim, decoded - openid-connect-generic-last-user-claim - the user's most recent user_claim + - openid-connect-generic-last-token-response - the user's most recent token response - openid-connect-generic-refresh-cookie-key - encryption key used to secure refresh token info in cookie Options diff --git a/readme.txt b/readme.txt index ef6dee4..15ed6aa 100644 --- a/readme.txt +++ b/readme.txt @@ -3,7 +3,7 @@ Contributors: daggerhart Donate link: http://www.daggerhart.com/ Tags: security, login, oauth2, openidconnect, apps, authentication, autologin, sso Requires at least: 4 -Tested up to: 4.7.3 +Tested up to: 4.8.3 Stable tag: trunk License: GPLv2 or later License URI: http://www.gnu.org/licenses/gpl-2.0.html