Isekai-Project
/
isekai-openid-connect-generic
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

If IdP doesn't issue a refresh token, expire the session when the access token expires.

Browse Source
isekai
Raif Atef 8 years ago
parent 2655668089
commit 38f78cc274
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File

12
includes/openid-connect-generic-client-wrapper.php
Unescape Escape View File

@ -123,6 +123,11 @@ class OpenID_Connect_Generic_Client_Wrapper {
return; return;
} }
if ( ! $refresh_token ) {
wp_logout();
$this->error_redirect( new WP_Error( 'access-token-expired', __( 'Session expired. Please login again.' ) ) );
}
$token_result = $this->client->request_new_tokens( $refresh_token ); $token_result = $this->client->request_new_tokens( $refresh_token );
$token_response = $this->client->get_token_response( $token_result ); $token_response = $this->client->get_token_response( $token_result );
@ -353,7 +358,7 @@ class OpenID_Connect_Generic_Client_Wrapper {
function issue_token_refresh_info_cookie( $user_id, $token_response ) { function issue_token_refresh_info_cookie( $user_id, $token_response ) {
$cookie_value = serialize( array( $cookie_value = serialize( array(
'next_access_token_refresh_time' => $token_response['expires_in'] + current_time( 'timestamp' , TRUE ), 'next_access_token_refresh_time' => $token_response['expires_in'] + current_time( 'timestamp' , TRUE ),
'refresh_token' => $token_response[ 'refresh_token' ] 'refresh_token' => isset( $token_response[ 'refresh_token' ] ) ? $token_response[ 'refresh_token' ] : false
) ); ) );
$key = $this->get_refresh_cookie_encryption_key( $user_id ); $key = $this->get_refresh_cookie_encryption_key( $user_id );
$encrypted_cookie_value = \Defuse\Crypto\Crypto::encrypt( $cookie_value, $key ); $encrypted_cookie_value = \Defuse\Crypto\Crypto::encrypt( $cookie_value, $key );
@ -370,8 +375,9 @@ class OpenID_Connect_Generic_Client_Wrapper {
$key = $this->get_refresh_cookie_encryption_key( $user_id ); $key = $this->get_refresh_cookie_encryption_key( $user_id );
$cookie_value = unserialize( \Defuse\Crypto\Crypto::decrypt($encrypted_cookie_value, $key) ); $cookie_value = unserialize( \Defuse\Crypto\Crypto::decrypt($encrypted_cookie_value, $key) );
if ( ! isset( $cookie_value[ 'next_access_token_refresh_time' ] ) || ! $cookie_value[ 'next_access_token_refresh_time' ] if ( ! isset( $cookie_value[ 'next_access_token_refresh_time' ] )
|| ! isset( $cookie_value[ 'refresh_token' ] ) || ! $cookie_value[ 'refresh_token' ] ) { || ! $cookie_value[ 'next_access_token_refresh_time' ]
|| ! isset( $cookie_value[ 'refresh_token' ] ) ) {
return false; return false;
} }

Write Preview
Loading…
Cancel
Save