0a2572e781
Readme and hooks
6 years ago
0d4e4bd006
additional error detection on user_claim
6 years ago
6917df262f
Allow identity providers which do not support the userinfo endpoint. ( #100 )
...
* Allow identity providers which do not support the userinfo endpoint.
* Fixed empty check for userinfo endpoint
6 years ago
54f3ff4193
allow developers to use the plain auth url by shortcode ( #98 )
...
* allow developers to use the plain auth url by shortcode
* prevent to set the redirect cookie on every page request by moving the function call to the formular rendering.
6 years ago
87470689db
avoid messing-up with wp-cli ( #96 )
...
When using wp-cli (eg: rewrite/cache flush), init() will run setcookie() which would trigger "headers already sent by". Just disable module when wp-cli is being used.
6 years ago
72305fcc9f
Merge branch 'dev'
7 years ago
93d41ee3c6
fixing composer.json and updateing readme
7 years ago
e8545af123
nvm, wp.org can have it's own folder name
7 years ago
94e73af1b6
renaming to match wordpress.org plugin slug
7 years ago
18625fbc21
updating readme to include composer information
7 years ago
2a1b797e17
fixing composer.json for packagist
7 years ago
64a4676c88
trailing comma in json
7 years ago
ef6fac4e41
version update along with readmes. new composer.json to place on packagist
7 years ago
f3096b6f14
fix a notice: If using traditional login, $token_response may be empty ( #86 )
...
fix a 404: In Bedrock-like layout configuration, $redirect_url === 'wp-login.php?loggedout=true'
(which work for local redirection). But canonicalization should take into account the additional /wp/
prefix. site_url() does meanwhile home_url() does not.
7 years ago
f9c076a5c0
hook: ability to filter claim and derived user data ( #84 )
7 years ago
6263bee23b
google provider: do not attempt to use their not-compliant /revoke endpoint ( #83 )
7 years ago
58c8b7ac9a
disconnect hook: get user meta from information provided by filter parameters ( #82 )
7 years ago
d0b79313c2
fixed a notice when cookie does not contain expected redirect_url ( #80 )
7 years ago
756c3c05a1
Translit names' special characters ( #73 )
...
When nickname is generated from a full name, intent to translit them to ascii instead of stripping special characters.
7 years ago
56bd5718e6
Feature #68 state time limit option ( #69 )
...
* Added an option for state time limit on the settings page
7 years ago
6bc53f96d4
some readme and metadata updates for plugin repo
7 years ago
9bf826c704
Merge pull request #66 from daggerhart/timeout
...
removed generic wp filter used for request timeout
7 years ago
a99280600a
removed generic wp filter used for request timeout
7 years ago
c098e9da30
Merge pull request #65 from daggerhart/prefix
...
Prefixes for better autoloading
7 years ago
326efbb416
prefixing generic classes with oidcg comment class names. adjusting autoloading to look for the standardized prefix.
7 years ago
6f077c932a
incrementing to 3.3.x, updating readmes and changelog
7 years ago
e02e455965
Merge pull request #52 from dirtsimple/wp_tokens
...
Simplify refresh/logout handling (to fix #49 , #50 , and #51 )
7 years ago
e541a9f3b4
updating version
7 years ago
b14554e8fe
WP still supports PHP 5.2.4 :(
7 years ago
662e9fb25b
Track refresh token expiration ( fixes #51 )
7 years ago
caf1324499
Defer logouts to after all WP plugins initialize
7 years ago
134d0116b8
Drop unnecessary user_meta keys
7 years ago
7879835b49
Store refresh token in sessions, instead of a cookie
7 years ago
06ed9dfdd8
Exit after issuing a redirect
...
Terminate authentication_request_callback() after execution
Related issue: #46
7 years ago
3869aa0fde
Terminate authentication_request_callback() after execution
7 years ago
08af84a851
readme and changelog updates. minor whitespace update.
7 years ago
3683cd3286
Merge pull request #42 from daggerhart/redirect-on-logout-as-setting
...
New setting to determine if users should be redirected when session expires.
7 years ago
fb119dec5f
Add id_token_hint to end session logout redirect url
...
Thanks @skidos!
7 years ago
c73d9f6956
new setting allows administrator to determine if users should be redirected when their acces token expires.
7 years ago
059d672de2
Update openid-connect-generic-client-wrapper.php
...
Add id_token_hint to end session logout redirect url
http://openid.net/specs/openid-connect-session-1_0.html#RPLogout
7 years ago
cdf2629aa3
Merge pull request #32 from robbiepaul/dev
...
Authentication URL can be modified
8 years ago
69a431793f
Authentication URL can be modified
...
Some OpenID Connect providers offer additional functionality by adding
query params to the authentication URL
For example with Azure Active Directory if you pass in
`&domain_hint=REALM` you can customise the way the login screen looks
with your corporate logo etc
8 years ago
b64fab27be
breaking out changelog into its own file, providing attribution to users that have helped with issues and prs
8 years ago
814a7e6ca7
Merge pull request #31 from robbiepaul/dev
...
Calls the wp_login action at the end of the login flow
8 years ago
82162ec753
Escape the error message
...
* This commit prevents a possible reflected XSS
8 years ago
672d7292e2
Include wp_login action after auth cookie is set
...
* Many plugins will hook in to this action, it should be at the end of any
WordPress login flow
* See: https://core.trac.wordpress.org/browser/tags/4.7.3/src/wp-includes/user.php#L104
8 years ago
b8ad2dd560
updating version and readmes
8 years ago
61c549189c
adding port to the request headers per issue #30
8 years ago
14133138a7
some method annotation corrections, and minor settings page typoes
8 years ago
54c43eb2b9
Merge pull request #27 from opencollector/moriyoshi/more-flexible-identity-settings
...
More flexible identity settings.
8 years ago
Jonathan Daggerhart
Matt Varblow
cswebservice
Raphaël Droz
Antti Leppä
PJ Eby
Sven van Hal
skidos
Robbie Paul