diff --git a/openid-connect-generic.php b/openid-connect-generic.php index 45e029c..c9fdbca 100644 --- a/openid-connect-generic.php +++ b/openid-connect-generic.php @@ -1,9 +1,9 @@ OpenID Connect Generic dashboard page. -Originally based on the plugin provided by shirounagi - https://wordpress.org/plugins/generic-openid-connect/ - ### Installation 1. Upload to the `/wp-content/plugins/` directory diff --git a/readme.txt b/readme.txt index 0441e15..44b6608 100644 --- a/readme.txt +++ b/readme.txt @@ -19,9 +19,7 @@ new users are created in WordPress database. Much of the documentation can be found on the Settings > OpenID Connect Generic dashboard page. -Originally based on the plugin provided by shirounagi - https://wordpress.org/plugins/generic-openid-connect/ - but -has been completely rewritten. - +Please submit issues to the Github repo: https://github.com/daggerhart/openid-connect-generic == Installation == @@ -41,4 +39,91 @@ Replace `example.com` with your domain name and path to WordPress. == Changelog == -See changelog.md += 3.3.1 = + +* Prefixing classes for more efficient autoloading. +* Avoid altering global wp_remote_post() parameters. +* Minor metadata updates for wp.org + += 3.3.0 = + +* Fix: @pjeby - Handle multiple user sessions better by using the `WP_Session_Tokens` object. Predecessor to fixes for multiple other issues: #49, #50, #51 + += 3.2.1 = + +* Bug fix: @svenvanhal - Exit after issuing redirect. Fixes #46 + += 3.2.0 = + +* Feature: @robbiepaul - trigger core action `wp_login` when user is logged in through this plugin +* Feature: @moriyoshi - Determine the WP_User display name with replacement tokens on the settings page. Tokens can be any property of the user_claim. +* Feature: New setting to set redirect URL when session expires. +* Feature: @robbiepaul - New filter for modifying authentication URL +* Fix: @cedrox - Adding id_token_hint to logout URL according to spec +* Bug fix: Provide port to the request header when requesting the user_claim + += 3.1.0 = + +* Feature: @rwasef1830 - Refresh tokens +* Feature: @rwasef1830 - Integrated logout support with end_session endpoint +* Feature: May use an alternate redirect_uri that doesn't rely on admin-ajax +* Feature: @ahatherly - Support for IDP behind reverse proxy +* Bug fix: @robertstaddon - case insensitive check for Bearer token +* Bug fix: @rwasef1830 - "redirect to origin when auto-sso" cookie issue +* Bug fix: @rwasef1830 - PHP Warnings headers already sent due to attempts to redirect and set cookies during login form message +* Bug fix: @rwasef1830 - expire session when access_token expires if no refresh token found +* UX fix: @rwasef1830 - Show login button on error redirect when using auto-sso + += 3.0.8 = + +* Feature: @wgengarelly - Added `openid-connect-generic-update-user-using-current-claim` action hook allowing other plugins/themes + to take action using the fresh claims received when an existing user logs in. + += 3.0.7 = + +* Bug fix: @wgengarelly - When requesting userinfo, send the access token using the Authorization header field as recommended in +section 5.3.1 of the specs. + += 3.0.6 = + +* Bug fix: @robertstaddon - If "Link Existing Users" is enabled, allow users who login with OpenID Connect to also log in with WordPress credentials + += 3.0.5 = + +* Feature: @robertstaddon - Added `[openid_connect_generic_login_button]` shortcode to allow the login button to be placed anywhere +* Feature: @robertstaddon - Added setting to "Redirect Back to Origin Page" after a successful login instead of redirecting to the home page. + += 3.0.4 = + +* Feature: @robertstaddon - Added setting to allow linking existing WordPress user accounts with newly-authenticated OpenID Connect login + += 3.0.3 = + +* Using WordPresss's is_ssl() for setcookie()'s "secure" parameter +* Bug fix: Incrementing username in case of collision. +* Bug fix: Wrong error sent when missing token body + += 3.0.2 = + +* Added http_request_timeout setting + += 3.0.1 = + +* Finalizing 3.0.x api + += 3.0 = + +* Complete rewrite to separate concerns +* Changed settings keys for clarity (requires updating settings if upgrading from another version) +* Error logging + += 2.1 = + +* Working my way closer to spec. Possible breaking change. Now checking for preferred_username as priority. +* New username determination to avoid collisions + += 2.0 = + +Complete rewrite + +