107a066bd5
Add Redirect & Override Attributes Support to Shortcodes.
...
* Adds support for setting the redirect cookie when shortcodes are used.
* Adds support for overriding some attributes for authentication URLs
and login buttons when using the shortcodes.
* Fixes code formatting.
5 years ago
42a7163160
Merge pull request #199 from timnolte/feature/disable-refresh-token
...
Adds Option to Enable/Disable Token Refresh.
5 years ago
1c8a9d166c
Adds Option to Enable/Disable Token Refresh.
...
* Adds a new plugin setting.
* Adds a check and doesn't create cookie for refresh token if not
enabled.
* Fixes code formatting.
Fixes #144
5 years ago
bf2e517a89
removing trailing whitespace
5 years ago
a0dfa7723d
documenting new username normalization
5 years ago
d91d6d2ea3
Merge branch 'dev' into fix-silent-iconv-failure
5 years ago
fb3a9f53c3
updating version and readme for new changes
5 years ago
f81dbcc6e5
Merge pull request #148 from benochen/contribution
...
Add a setting checkbox defining the behavior of the client if a user…
5 years ago
4a84b3c651
Merge pull request #183 from cs1m0n/increment_username_fix
...
Increment username just when link_existing_users is off
5 years ago
d39c0da990
Merge pull request #189 from dxw/feature/actions-for-error-logging
...
Increase granularity of state token errors
5 years ago
dc41454283
Merge pull request #191 from dxw/feature/login-button-url-filter
...
Add filter for login form button URL
5 years ago
d21bc60fbc
Allow periods and spaces in usernames
...
issue #141
5 years ago
474f6cb361
Add filter for login form button URL
...
This will allow developers to e.g. redirect users to an intermediary page before being taken to the SSO provider.
5 years ago
836500a495
Increase detail of state token errors
...
Before: a missing state error could be returned for 3 reasons: a token was not provided, the token provided was invalid, or the token provided had expired.
There was no way of knowing which of these was the cause of any single missing state error.
Now: if no token is provided, a missing state error is returned, and the "openid-connect-generic-no-state-provided" action is called.
If the token provided is invalid, an "Invalid state" error is thrown and the "openid-connect-generic-state-not-found" action is called.
If the token provided has expired, an "Invalid state" error is returned and the "openid-connect-generic-state-expired" action is called.
This should allow for more granular error logging around state token errors.
5 years ago
8237aa5b84
RFC 3986 encode parameters in authentication URL
5 years ago
0940c8c863
Delete expired transients
5 years ago
8c82b86f29
Increment username just when link_existing_users is off
5 years ago
0c83125c7a
Add note on authentication url shortcode
5 years ago
f401b3f53b
moving openid-connect-generic-alter-user-claim to top of method
5 years ago
f01a8bf608
Merge pull request #156 from ksimunovic/dev
...
Add two filters to modify received data before validation
5 years ago
11695f56ab
Add logger to OpenID_Connect_Generic
...
(also remove code parameter value in the query stirng url for better reading of the logs)
5 years ago
96bb449f39
Fix race condition by replacing states option array with individual transients
5 years ago
47ea6d6ec3
Add two filters to modify received $token_response and $id_token_claim before validation
...
This is related to daggerhart/openid-connect-generic#155
5 years ago
1f2b3171f0
add Error messages on failed username transliteration/normalization
5 years ago
66a0b319d4
Add a setting checkbox defining the behavior of the client if a user authenticates with a user not map with existing WP user. If tick the user is created. If not tick the authentication failed
5 years ago
f42a587bf0
Merge pull request #145 from TeDo-Verlag/notice-response-sent
...
avoid headers already sent error notice
5 years ago
54d6784d44
Allow multiple query params when redirecting back to origin
5 years ago
4955be3b71
Merge pull request #137 from dfredell/patch-1
...
More logging on incomplete-user-claim
5 years ago
a70fc8fe04
avoid headers already sent error notice
5 years ago
8c5b265ca7
More logging on incomplete-user-claim
...
Add logging so the user can more quickly discover which filed is unavailable during formatting.
Helps in debugging #91
5 years ago
caf3ea7267
1. run 'openid-connect-generic-update-user-using-current-claim' action
...
if existing user was updated
2. add_user_meta with single=true does not overwrite old value
6 years ago
f3829b48e2
documenting new action on user login
6 years ago
96b25f6c90
added force_redirect parameter and login action
6 years ago
11e89fd9b2
fix stripos call
6 years ago
39ae1f8a8f
Filter redirect URL before stashing it to a cookie
6 years ago
f33225fc2c
Issue #108 : Attempt to fix regression for cookie during auto flow ( #119 )
6 years ago
6dfb0fafa5
Issue #76 : Avoid double question marks in auth url query string ( #120 )
6 years ago
0b51e9c1e5
Change PHP keywords to comply with PSR2 ( #116 )
...
Signed-off-by: CodeLingoBot <bot@codelingo.io>
6 years ago
6ecb69f1cb
Allow override of the plugin by posting credentials to wp-login.php ( #118 )
...
* allow overriding the plugin if credentials are POSTed to wp-login.php
* fix indentation to be consistent
6 years ago
4d7939e9e5
Bug with some special char in the firstname or lastname
...
Add str_replace because token is encoded in base64 URL (and not just base64).
Solves the problem with some special char
Re: #101
6 years ago
0d4e4bd006
additional error detection on user_claim
6 years ago
6917df262f
Allow identity providers which do not support the userinfo endpoint. ( #100 )
...
* Allow identity providers which do not support the userinfo endpoint.
* Fixed empty check for userinfo endpoint
6 years ago
54f3ff4193
allow developers to use the plain auth url by shortcode ( #98 )
...
* allow developers to use the plain auth url by shortcode
* prevent to set the redirect cookie on every page request by moving the function call to the formular rendering.
6 years ago
f3096b6f14
fix a notice: If using traditional login, $token_response may be empty ( #86 )
...
fix a 404: In Bedrock-like layout configuration, $redirect_url === 'wp-login.php?loggedout=true'
(which work for local redirection). But canonicalization should take into account the additional /wp/
prefix. site_url() does meanwhile home_url() does not.
7 years ago
f9c076a5c0
hook: ability to filter claim and derived user data ( #84 )
7 years ago
6263bee23b
google provider: do not attempt to use their not-compliant /revoke endpoint ( #83 )
7 years ago
58c8b7ac9a
disconnect hook: get user meta from information provided by filter parameters ( #82 )
7 years ago
d0b79313c2
fixed a notice when cookie does not contain expected redirect_url ( #80 )
7 years ago
756c3c05a1
Translit names' special characters ( #73 )
...
When nickname is generated from a full name, intent to translit them to ascii instead of stripping special characters.
7 years ago
56bd5718e6
Feature #68 state time limit option ( #69 )
...
* Added an option for state time limit on the settings page
7 years ago
Tim Nolte
Tim Nolte
Jonathan Daggerhart
Eersink.Michael
Rob Skilling
James Collier
Simon Costea
GeorgB
SYLVAIN PAILLASSE
Karlo Šimunović
Moritz Bellach
benoit
Stephanie
gguseynov
Dan Fredell
Gassan Gousseinov
Sarah Lewis
Shane Mulligan
Slavic Dragovtev
Matt Varblow
cswebservice
Raphaël Droz
Antti Leppä