103 Commits (a0dfa7723d270a2cc46fbb5bfbfc98a242f73a6f)

Author SHA1 Message Date
Jonathan Daggerhart a0dfa7723d documenting new username normalization 5 years ago
Jonathan Daggerhart d91d6d2ea3
Merge branch 'dev' into fix-silent-iconv-failure 5 years ago
Jonathan Daggerhart fb3a9f53c3 updating version and readme for new changes 5 years ago
Jonathan Daggerhart f81dbcc6e5
Merge pull request #148 from benochen/contribution
Add a setting checkbox defining the behavior of the client if a user…
5 years ago
Jonathan Daggerhart 4a84b3c651
Merge pull request #183 from cs1m0n/increment_username_fix
Increment username just when link_existing_users is off
5 years ago
Jonathan Daggerhart d39c0da990
Merge pull request #189 from dxw/feature/actions-for-error-logging
Increase granularity of state token errors
5 years ago
Jonathan Daggerhart dc41454283
Merge pull request #191 from dxw/feature/login-button-url-filter
Add filter for login form button URL
5 years ago
Eersink.Michael d21bc60fbc Allow periods and spaces in usernames
issue #141
5 years ago
Rob Skilling 474f6cb361 Add filter for login form button URL
This will allow developers to e.g. redirect users to an intermediary page before being taken to the SSO provider.
5 years ago
Rob Skilling 836500a495 Increase detail of state token errors
Before: a missing state error could be returned for 3 reasons: a token was not provided, the token provided was invalid, or the token provided had expired.

There was no way of knowing which of these was the cause of any single missing state error.

Now: if no token is provided, a missing state error is returned, and the "openid-connect-generic-no-state-provided" action is called.

If the token provided is invalid, an "Invalid state" error is thrown and the "openid-connect-generic-state-not-found" action is called.

If the token provided has expired, an "Invalid state" error is returned and the "openid-connect-generic-state-expired" action is called.

This should allow for more granular error logging around state token errors.
5 years ago
James Collier 8237aa5b84 RFC 3986 encode parameters in authentication URL 5 years ago
Simon Costea 0940c8c863 Delete expired transients 5 years ago
Simon Costea 8c82b86f29 Increment username just when link_existing_users is off 5 years ago
GeorgB 0c83125c7a
Add note on authentication url shortcode 5 years ago
Jonathan Daggerhart f401b3f53b moving openid-connect-generic-alter-user-claim to top of method 5 years ago
Jonathan Daggerhart f01a8bf608
Merge pull request #156 from ksimunovic/dev
Add two filters to modify received data before validation
5 years ago
SYLVAIN PAILLASSE 11695f56ab Add logger to OpenID_Connect_Generic
(also remove code parameter value in the query stirng url for better reading of the logs)
5 years ago
Jonathan Daggerhart 96bb449f39 Fix race condition by replacing states option array with individual transients 5 years ago
Karlo Šimunović 47ea6d6ec3 Add two filters to modify received $token_response and $id_token_claim before validation
This is related to daggerhart/openid-connect-generic#155
5 years ago
Moritz Bellach 1f2b3171f0
add Error messages on failed username transliteration/normalization 5 years ago
benoit 66a0b319d4 Add a setting checkbox defining the behavior of the client if a user authenticates with a user not map with existing WP user. If tick the user is created. If not tick the authentication failed 5 years ago
Jonathan Daggerhart f42a587bf0
Merge pull request #145 from TeDo-Verlag/notice-response-sent
avoid headers already sent error notice
5 years ago
Stephanie 54d6784d44 Allow multiple query params when redirecting back to origin 5 years ago
Jonathan Daggerhart 4955be3b71
Merge pull request #137 from dfredell/patch-1
More logging on incomplete-user-claim
5 years ago
gguseynov a70fc8fe04 avoid headers already sent error notice 5 years ago
Dan Fredell 8c5b265ca7
More logging on incomplete-user-claim
Add logging so the user can more quickly discover which filed is unavailable during formatting. 
Helps in debugging #91
5 years ago
gguseynov caf3ea7267 1. run 'openid-connect-generic-update-user-using-current-claim' action
if existing user was updated
2. add_user_meta with single=true does not overwrite old value
6 years ago
Jonathan Daggerhart f3829b48e2 documenting new action on user login 6 years ago
Gassan Gousseinov 96b25f6c90 added force_redirect parameter and login action 6 years ago
Gassan Gousseinov 11e89fd9b2 fix stripos call 6 years ago
Sarah Lewis 39ae1f8a8f Filter redirect URL before stashing it to a cookie 6 years ago
Jonathan Daggerhart f33225fc2c
Issue #108: Attempt to fix regression for cookie during auto flow (#119) 6 years ago
Jonathan Daggerhart 6dfb0fafa5
Issue #76: Avoid double question marks in auth url query string (#120) 6 years ago
Shane Mulligan 0b51e9c1e5 Change PHP keywords to comply with PSR2 (#116)
Signed-off-by: CodeLingoBot <bot@codelingo.io>
6 years ago
Slavic Dragovtev 6ecb69f1cb Allow override of the plugin by posting credentials to wp-login.php (#118)
* allow overriding the plugin if credentials are POSTed to wp-login.php

* fix indentation to be consistent
6 years ago
Jonathan Daggerhart 4d7939e9e5
Bug with some special char in the firstname or lastname
Add str_replace because token is encoded in base64 URL (and not just base64).
Solves the problem with some special char
Re: #101
6 years ago
Jonathan Daggerhart 0d4e4bd006 additional error detection on user_claim 6 years ago
Matt Varblow 6917df262f Allow identity providers which do not support the userinfo endpoint. (#100)
* Allow identity providers which do not support the userinfo endpoint.

* Fixed empty check for userinfo endpoint
6 years ago
cswebservice 54f3ff4193 allow developers to use the plain auth url by shortcode (#98)
* allow developers to use the plain auth url by shortcode

* prevent to set the redirect cookie on every page request by moving the function call to the formular rendering.
6 years ago
Raphaël Droz f3096b6f14 fix a notice: If using traditional login, $token_response may be empty (#86)
fix a 404: In Bedrock-like layout configuration, $redirect_url === 'wp-login.php?loggedout=true'
 (which work for local redirection). But canonicalization should take into account the additional /wp/
 prefix. site_url() does meanwhile home_url() does not.
7 years ago
Raphaël Droz f9c076a5c0 hook: ability to filter claim and derived user data (#84) 7 years ago
Raphaël Droz 6263bee23b google provider: do not attempt to use their not-compliant /revoke endpoint (#83) 7 years ago
Raphaël Droz 58c8b7ac9a disconnect hook: get user meta from information provided by filter parameters (#82) 7 years ago
Raphaël Droz d0b79313c2 fixed a notice when cookie does not contain expected redirect_url (#80) 7 years ago
Raphaël Droz 756c3c05a1 Translit names' special characters (#73)
When nickname is generated from a full name, intent to translit them to ascii instead of stripping special characters.
7 years ago
Antti Leppä 56bd5718e6 Feature #68 state time limit option (#69)
* Added an option for state time limit on the settings page
7 years ago
Jonathan Daggerhart a99280600a removed generic wp filter used for request timeout 7 years ago
Jonathan Daggerhart 326efbb416 prefixing generic classes with oidcg comment class names. adjusting autoloading to look for the standardized prefix. 7 years ago
PJ Eby b14554e8fe WP still supports PHP 5.2.4 :( 7 years ago
PJ Eby 662e9fb25b Track refresh token expiration (fixes #51) 7 years ago