Preparation for Maintenance Release (#291)

isekai
Tim Nolte 4 years ago committed by GitHub
parent 8a963301ab
commit 40e60474ab
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -1,5 +1,11 @@
# OpenId Connect Generic Changelog # OpenId Connect Generic Changelog
3.8.3
* Fix: @timnolte - Fixed problems with proper redirect handling.
* Improvement: @timnolte - Changes redirect handling to use State instead of cookies.
* Improvement: @timnolte - Refactored additional code to meet coding standards.
3.8.2 3.8.2
* Fix: @timnolte - Fixed reported XSS vulnerability on WordPress login screen. * Fix: @timnolte - Fixed reported XSS vulnerability on WordPress login screen.

@ -4,7 +4,7 @@
**Tags:** security, login, oauth2, openidconnect, apps, authentication, autologin, sso **Tags:** security, login, oauth2, openidconnect, apps, authentication, autologin, sso
**Requires at least:** 4.9 **Requires at least:** 4.9
**Tested up to:** 5.6 **Tested up to:** 5.6
**Stable tag:** 3.8.2 **Stable tag:** 3.8.3
**Requires PHP:** 7.1 **Requires PHP:** 7.1
**License:** GPLv2 or later **License:** GPLv2 or later
**License URI:** http://www.gnu.org/licenses/gpl-2.0.html **License URI:** http://www.gnu.org/licenses/gpl-2.0.html
@ -51,6 +51,12 @@ On the settings page for this plugin (Dashboard > Settings > OpenID Connect Gene
## Changelog ## ## Changelog ##
### 3.8.3 ###
* Fix: @timnolte - Fixed problems with proper redirect handling.
* Improvement: @timnolte - Changes redirect handling to use State instead of cookies.
* Improvement: @timnolte - Refactored additional code to meet coding standards.
### 3.8.2 ### ### 3.8.2 ###
* Fix: @timnolte - Fixed reported XSS vulnerability on WordPress login screen. * Fix: @timnolte - Fixed reported XSS vulnerability on WordPress login screen.

@ -2,10 +2,10 @@
# This file is distributed under the GPL-2.0+. # This file is distributed under the GPL-2.0+.
msgid "" msgid ""
msgstr "" msgstr ""
"Project-Id-Version: OpenID Connect Generic 3.8.2\n" "Project-Id-Version: OpenID Connect Generic 3.8.3\n"
"Report-Msgid-Bugs-To: " "Report-Msgid-Bugs-To: "
"https://github.com/daggerhart/openid-connect-generic/issues\n" "https://github.com/daggerhart/openid-connect-generic/issues\n"
"POT-Creation-Date: 2021-03-24 13:50:19+00:00\n" "POT-Creation-Date: 2021-04-08 12:27:16+00:00\n"
"MIME-Version: 1.0\n" "MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n" "Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n" "Content-Transfer-Encoding: 8bit\n"
@ -25,139 +25,147 @@ msgstr ""
"X-Textdomain-Support: yes\n" "X-Textdomain-Support: yes\n"
"X-Generator: grunt-wp-i18n 1.0.3\n" "X-Generator: grunt-wp-i18n 1.0.3\n"
#: includes/openid-connect-generic-client-wrapper.php:197 #: includes/openid-connect-generic-client-wrapper.php:194
msgid "Session expired. Please login again." msgid "Session expired. Please login again."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client-wrapper.php:433 #: includes/openid-connect-generic-client-wrapper.php:437
msgid "User identity is not linked to an existing WordPress user." msgid "User identity is not linked to an existing WordPress user."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client-wrapper.php:479 #: includes/openid-connect-generic-client-wrapper.php:493
msgid "Invalid user." msgid "Invalid user."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client-wrapper.php:598 #: includes/openid-connect-generic-client-wrapper.php:612
msgid "No appropriate username found." msgid "No appropriate username found."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client-wrapper.php:605 #: includes/openid-connect-generic-client-wrapper.php:620
#. translators: $1$s is a username from the IDP.
msgid "Username %1$s could not be transliterated." msgid "Username %1$s could not be transliterated."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client-wrapper.php:609 #: includes/openid-connect-generic-client-wrapper.php:625
#. translators: %1$s is the ASCII version of the username from the IDP.
msgid "Username %1$s could not be normalized." msgid "Username %1$s could not be normalized."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client-wrapper.php:642 #: includes/openid-connect-generic-client-wrapper.php:659
#. translators: %1$s is the configured User Claim nickname key.
msgid "No nickname found in user claim using key: %1$s." msgid "No nickname found in user claim using key: %1$s."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client-wrapper.php:669 #: includes/openid-connect-generic-client-wrapper.php:686
msgid "User claim incomplete." msgid "User claim incomplete."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client-wrapper.php:771 #: includes/openid-connect-generic-client-wrapper.php:788
msgid "Bad user claim result." msgid "Bad user claim result."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client-wrapper.php:826 #: includes/openid-connect-generic-client-wrapper.php:843
msgid "Can not authorize." msgid "Can not authorize."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client-wrapper.php:845 #: includes/openid-connect-generic-client-wrapper.php:862
msgid "Failed user creation." msgid "Failed user creation."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:179 #: includes/openid-connect-generic-client.php:191
msgid "Missing state." msgid "Missing state."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:183 #: includes/openid-connect-generic-client.php:195
msgid "Invalid state." msgid "Invalid state."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:198 #: includes/openid-connect-generic-client.php:210
msgid "Missing authentication code." msgid "Missing authentication code."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:237 #: includes/openid-connect-generic-client.php:249
msgid "Request for authentication token failed." msgid "Request for authentication token failed."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:268 #: includes/openid-connect-generic-client.php:280
msgid "Refresh token failed." msgid "Refresh token failed."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:283 #: includes/openid-connect-generic-client.php:295
msgid "Missing token body." msgid "Missing token body."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:291 #: includes/openid-connect-generic-client.php:303
msgid "Invalid token." msgid "Invalid token."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:342 #: includes/openid-connect-generic-client.php:354
msgid "Request for userinfo failed." msgid "Request for userinfo failed."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:417 #: includes/openid-connect-generic-client.php:414
msgid "Missing authentication state."
msgstr ""
#: includes/openid-connect-generic-client.php:451
msgid "No identity token." msgid "No identity token."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:424 #: includes/openid-connect-generic-client.php:458
msgid "Missing identity token." msgid "Missing identity token."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:451 #: includes/openid-connect-generic-client.php:485
msgid "Bad ID token claim." msgid "Bad ID token claim."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:456 #: includes/openid-connect-generic-client.php:490
msgid "No subject identity." msgid "No subject identity."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:475 #: includes/openid-connect-generic-client.php:509
msgid "Bad user claim." msgid "Bad user claim."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:495 #: includes/openid-connect-generic-client.php:529
msgid "Invalid user claim." msgid "Invalid user claim."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:500 #: includes/openid-connect-generic-client.php:534
msgid "Error from the IDP." msgid "Error from the IDP."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:509 #: includes/openid-connect-generic-client.php:543
msgid "Incorrect user claim." msgid "Incorrect user claim."
msgstr "" msgstr ""
#: includes/openid-connect-generic-client.php:516 #: includes/openid-connect-generic-client.php:550
msgid "Unauthorized access." msgid "Unauthorized access."
msgstr "" msgstr ""
#: includes/openid-connect-generic-login-form.php:158 #: includes/openid-connect-generic-login-form.php:169
#. translators: %1$s is the error code from the IDP.
msgid "ERROR (%1$s)" msgid "ERROR (%1$s)"
msgstr "" msgstr ""
#: includes/openid-connect-generic-login-form.php:174 #: includes/openid-connect-generic-login-form.php:188
msgid "Login with OpenID Connect" msgid "Login with OpenID Connect"
msgstr "" msgstr ""
#: includes/openid-connect-generic-option-logger.php:265 #: includes/openid-connect-generic-option-logger.php:262
msgid "Type" msgid "Type"
msgstr "" msgstr ""
#: includes/openid-connect-generic-option-logger.php:269 #: includes/openid-connect-generic-option-logger.php:266
msgid "Date" msgid "Date"
msgstr "" msgstr ""
#: includes/openid-connect-generic-option-logger.php:273 #: includes/openid-connect-generic-option-logger.php:270
msgid "User" msgid "User"
msgstr "" msgstr ""
#: includes/openid-connect-generic-option-logger.php:277 #: includes/openid-connect-generic-option-logger.php:274
msgid "URI " msgid "URI "
msgstr "" msgstr ""
@ -276,7 +284,9 @@ msgstr ""
msgid "Disable SSL Verify" msgid "Disable SSL Verify"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:284 #: includes/openid-connect-generic-settings-page.php:285
#. translators: %1$s HTML tags for layout/styles, %2$s closing HTML tag for
#. styles.
msgid "" msgid ""
"Do not require SSL verification during authorization. The OAuth extension " "Do not require SSL verification during authorization. The OAuth extension "
"uses curl to make the request. By default CURL will generally verify the " "uses curl to make the request. By default CURL will generally verify the "
@ -285,27 +295,27 @@ msgid ""
"sites.%2$s" "sites.%2$s"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:289 #: includes/openid-connect-generic-settings-page.php:290
msgid "HTTP Request Timeout" msgid "HTTP Request Timeout"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:290 #: includes/openid-connect-generic-settings-page.php:291
msgid "Set the timeout for requests made to the IDP. Default value is 5." msgid "Set the timeout for requests made to the IDP. Default value is 5."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:296 #: includes/openid-connect-generic-settings-page.php:297
msgid "Enforce Privacy" msgid "Enforce Privacy"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:297 #: includes/openid-connect-generic-settings-page.php:298
msgid "Require users be logged in to see the site." msgid "Require users be logged in to see the site."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:302 #: includes/openid-connect-generic-settings-page.php:303
msgid "Alternate Redirect URI" msgid "Alternate Redirect URI"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:303 #: includes/openid-connect-generic-settings-page.php:304
msgid "" msgid ""
"Provide an alternative redirect route. Useful if your server is causing " "Provide an alternative redirect route. Useful if your server is causing "
"issues with the default admin-ajax method. You must flush rewrite rules " "issues with the default admin-ajax method. You must flush rewrite rules "
@ -313,78 +323,78 @@ msgid ""
"settings page." "settings page."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:308 #: includes/openid-connect-generic-settings-page.php:309
msgid "Nickname Key" msgid "Nickname Key"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:309 #: includes/openid-connect-generic-settings-page.php:310
msgid "" msgid ""
"Where in the user claim array to find the user's nickname. Possible " "Where in the user claim array to find the user's nickname. Possible "
"standard values: preferred_username, name, or sub." "standard values: preferred_username, name, or sub."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:315 #: includes/openid-connect-generic-settings-page.php:316
msgid "Email Formatting" msgid "Email Formatting"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:316 #: includes/openid-connect-generic-settings-page.php:317
msgid "" msgid ""
"String from which the user's email address is built. Specify \"{email}\" as " "String from which the user's email address is built. Specify \"{email}\" as "
"long as the user claim contains an email claim." "long as the user claim contains an email claim."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:322 #: includes/openid-connect-generic-settings-page.php:323
msgid "Display Name Formatting" msgid "Display Name Formatting"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:323 #: includes/openid-connect-generic-settings-page.php:324
msgid "String from which the user's display name is built." msgid "String from which the user's display name is built."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:329 #: includes/openid-connect-generic-settings-page.php:330
msgid "Identify with User Name" msgid "Identify with User Name"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:330 #: includes/openid-connect-generic-settings-page.php:331
msgid "" msgid ""
"If checked, the user's identity will be determined by the user name instead " "If checked, the user's identity will be determined by the user name instead "
"of the email address." "of the email address."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:335 #: includes/openid-connect-generic-settings-page.php:336
msgid "State time limit" msgid "State time limit"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:336 #: includes/openid-connect-generic-settings-page.php:337
msgid "State valid time in seconds. Defaults to 180" msgid "State valid time in seconds. Defaults to 180"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:341 #: includes/openid-connect-generic-settings-page.php:342
msgid "Enable Refresh Token" msgid "Enable Refresh Token"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:342 #: includes/openid-connect-generic-settings-page.php:343
msgid "" msgid ""
"If checked, support refresh tokens used to obtain access tokens from " "If checked, support refresh tokens used to obtain access tokens from "
"supported IDPs." "supported IDPs."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:347 #: includes/openid-connect-generic-settings-page.php:348
msgid "Link Existing Users" msgid "Link Existing Users"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:348 #: includes/openid-connect-generic-settings-page.php:349
msgid "" msgid ""
"If a WordPress account already exists with the same identity as a " "If a WordPress account already exists with the same identity as a "
"newly-authenticated user over OpenID Connect, login as that user instead of " "newly-authenticated user over OpenID Connect, login as that user instead of "
"generating an error." "generating an error."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:353 #: includes/openid-connect-generic-settings-page.php:354
msgid "Create user if does not exist" msgid "Create user if does not exist"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:354 #: includes/openid-connect-generic-settings-page.php:355
msgid "" msgid ""
"If the user identity is not link to an existing Wordpress user, it is " "If the user identity is not link to an existing Wordpress user, it is "
"created. If this setting is not enabled and if the user authenticates with " "created. If this setting is not enabled and if the user authenticates with "
@ -392,11 +402,11 @@ msgid ""
"authentication failed" "authentication failed"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:359 #: includes/openid-connect-generic-settings-page.php:360
msgid "Redirect Back to Origin Page" msgid "Redirect Back to Origin Page"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:360 #: includes/openid-connect-generic-settings-page.php:361
msgid "" msgid ""
"After a successful OpenID Connect authentication, this will redirect the " "After a successful OpenID Connect authentication, this will redirect the "
"user back to the page on which they clicked the OpenID Connect login " "user back to the page on which they clicked the OpenID Connect login "
@ -407,75 +417,75 @@ msgid ""
"account page." "account page."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:365 #: includes/openid-connect-generic-settings-page.php:366
msgid "Redirect to the login screen when session is expired" msgid "Redirect to the login screen when session is expired"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:366 #: includes/openid-connect-generic-settings-page.php:367
msgid "" msgid ""
"When enabled, this will automatically redirect the user back to the " "When enabled, this will automatically redirect the user back to the "
"WordPress login page if their access token has expired." "WordPress login page if their access token has expired."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:371 #: includes/openid-connect-generic-settings-page.php:372
msgid "Enable Logging" msgid "Enable Logging"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:372 #: includes/openid-connect-generic-settings-page.php:373
msgid "Very simple log messages for debugging purposes." msgid "Very simple log messages for debugging purposes."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:377 #: includes/openid-connect-generic-settings-page.php:378
msgid "Log Limit" msgid "Log Limit"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:378 #: includes/openid-connect-generic-settings-page.php:379
msgid "" msgid ""
"Number of items to keep in the log. These logs are stored as an option in " "Number of items to keep in the log. These logs are stored as an option in "
"the database, so space is limited." "the database, so space is limited."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:438 #: includes/openid-connect-generic-settings-page.php:439
msgid "Notes" msgid "Notes"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:441 #: includes/openid-connect-generic-settings-page.php:442
msgid "Redirect URI" msgid "Redirect URI"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:445 #: includes/openid-connect-generic-settings-page.php:446
msgid "Login Button Shortcode" msgid "Login Button Shortcode"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:449 #: includes/openid-connect-generic-settings-page.php:450
msgid "Authentication URL Shortcode" msgid "Authentication URL Shortcode"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:454 #: includes/openid-connect-generic-settings-page.php:455
msgid "Logs" msgid "Logs"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:534 #: includes/openid-connect-generic-settings-page.php:535
msgid "Example" msgid "Example"
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:547 #: includes/openid-connect-generic-settings-page.php:548
msgid "Enter your OpenID Connect identity provider settings." msgid "Enter your OpenID Connect identity provider settings."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:556 #: includes/openid-connect-generic-settings-page.php:557
msgid "Modify the interaction between OpenID Connect and WordPress users." msgid "Modify the interaction between OpenID Connect and WordPress users."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:565 #: includes/openid-connect-generic-settings-page.php:566
msgid "Control the authorization mechanics of the site." msgid "Control the authorization mechanics of the site."
msgstr "" msgstr ""
#: includes/openid-connect-generic-settings-page.php:574 #: includes/openid-connect-generic-settings-page.php:575
msgid "Log information about login attempts through OpenID Connect Generic." msgid "Log information about login attempts through OpenID Connect Generic."
msgstr "" msgstr ""
#: openid-connect-generic.php:200 #: openid-connect-generic.php:202
msgid "Private site" msgid "Private site"
msgstr "" msgstr ""

@ -16,7 +16,7 @@
* Plugin Name: OpenID Connect Generic * Plugin Name: OpenID Connect Generic
* Plugin URI: https://github.com/daggerhart/openid-connect-generic * Plugin URI: https://github.com/daggerhart/openid-connect-generic
* Description: Connect to an OpenID Connect generic client using Authorization Code Flow. * Description: Connect to an OpenID Connect generic client using Authorization Code Flow.
* Version: 3.8.2 * Version: 3.8.3
* Author: daggerhart * Author: daggerhart
* Author URI: http://www.daggerhart.com * Author URI: http://www.daggerhart.com
* Text Domain: daggerhart-openid-connect-generic * Text Domain: daggerhart-openid-connect-generic
@ -80,7 +80,7 @@ class OpenID_Connect_Generic {
* *
* @var * @var
*/ */
const VERSION = '3.8.2'; const VERSION = '3.8.3';
/** /**
* Plugin settings. * Plugin settings.

2
package-lock.json generated

@ -1,6 +1,6 @@
{ {
"name": "openid-connect-generic", "name": "openid-connect-generic",
"version": "3.8.2", "version": "3.8.3",
"lockfileVersion": 1, "lockfileVersion": 1,
"requires": true, "requires": true,
"dependencies": { "dependencies": {

@ -1,6 +1,6 @@
{ {
"name": "openid-connect-generic", "name": "openid-connect-generic",
"version": "3.8.2", "version": "3.8.3",
"description": "OpenID Connect generic WordPress plugin.", "description": "OpenID Connect generic WordPress plugin.",
"main": "Gruntfile.js", "main": "Gruntfile.js",
"repository": { "repository": {

@ -4,7 +4,7 @@ Donate link: http://www.daggerhart.com/
Tags: security, login, oauth2, openidconnect, apps, authentication, autologin, sso Tags: security, login, oauth2, openidconnect, apps, authentication, autologin, sso
Requires at least: 4.9 Requires at least: 4.9
Tested up to: 5.6 Tested up to: 5.6
Stable tag: 3.8.2 Stable tag: 3.8.3
Requires PHP: 7.1 Requires PHP: 7.1
License: GPLv2 or later License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html License URI: http://www.gnu.org/licenses/gpl-2.0.html
@ -51,6 +51,12 @@ On the settings page for this plugin (Dashboard > Settings > OpenID Connect Gene
== Changelog == == Changelog ==
= 3.8.3 =
* Fix: @timnolte - Fixed problems with proper redirect handling.
* Improvement: @timnolte - Changes redirect handling to use State instead of cookies.
* Improvement: @timnolte - Refactored additional code to meet coding standards.
= 3.8.2 = = 3.8.2 =
* Fix: @timnolte - Fixed reported XSS vulnerability on WordPress login screen. * Fix: @timnolte - Fixed reported XSS vulnerability on WordPress login screen.

Loading…
Cancel
Save