fixing bad identity_key check

10 years ago · 506ac3b338
parent b03876e0bb
commit 506ac3b338
1 changed files with 1 additions and 1 deletions
--- a/openid-connect-generic.php
+++ b/openid-connect-generic.php
@ -247,7 +247,7 @@ class OpenID_Connect_Generic {
    $user_claim = json_decode( $user_claim_result['body'], true );
    
    // make sure the id_token sub === user_claim sub, according to spec
-    if ( $id_token_claim['sub'] !== $user_claim['sub'] ) {
+    if ( $id_token_claim[ $settings['identity_key'] ] !== $user_claim['sub'] ) {
      $this->error_redirect( 4 );
    }