Jonathan Daggerhart
c098e9da30
Merge pull request #65 from daggerhart/prefix
...
Prefixes for better autoloading
7 years ago
Jonathan Daggerhart
326efbb416
prefixing generic classes with oidcg comment class names. adjusting autoloading to look for the standardized prefix.
7 years ago
Jonathan Daggerhart
6f077c932a
incrementing to 3.3.x, updating readmes and changelog
7 years ago
Jonathan Daggerhart
e02e455965
Merge pull request #52 from dirtsimple/wp_tokens
...
Simplify refresh/logout handling (to fix #49 , #50 , and #51 )
7 years ago
Jonathan Daggerhart
e541a9f3b4
updating version
7 years ago
PJ Eby
b14554e8fe
WP still supports PHP 5.2.4 :(
7 years ago
PJ Eby
662e9fb25b
Track refresh token expiration ( fixes #51 )
7 years ago
PJ Eby
caf1324499
Defer logouts to after all WP plugins initialize
7 years ago
PJ Eby
134d0116b8
Drop unnecessary user_meta keys
7 years ago
PJ Eby
7879835b49
Store refresh token in sessions, instead of a cookie
7 years ago
Jonathan Daggerhart
06ed9dfdd8
Exit after issuing a redirect
...
Terminate authentication_request_callback() after execution
Related issue: #46
7 years ago
Sven van Hal
3869aa0fde
Terminate authentication_request_callback() after execution
7 years ago
Jonathan Daggerhart
08af84a851
readme and changelog updates. minor whitespace update.
7 years ago
Jonathan Daggerhart
3683cd3286
Merge pull request #42 from daggerhart/redirect-on-logout-as-setting
...
New setting to determine if users should be redirected when session expires.
7 years ago
Jonathan Daggerhart
fb119dec5f
Add id_token_hint to end session logout redirect url
...
Thanks @skidos!
7 years ago
Jonathan Daggerhart
c73d9f6956
new setting allows administrator to determine if users should be redirected when their acces token expires.
7 years ago
skidos
059d672de2
Update openid-connect-generic-client-wrapper.php
...
Add id_token_hint to end session logout redirect url
http://openid.net/specs/openid-connect-session-1_0.html#RPLogout
7 years ago
Jonathan Daggerhart
cdf2629aa3
Merge pull request #32 from robbiepaul/dev
...
Authentication URL can be modified
8 years ago
Robbie Paul
69a431793f
Authentication URL can be modified
...
Some OpenID Connect providers offer additional functionality by adding
query params to the authentication URL
For example with Azure Active Directory if you pass in
`&domain_hint=REALM` you can customise the way the login screen looks
with your corporate logo etc
8 years ago
Jonathan Daggerhart
b64fab27be
breaking out changelog into its own file, providing attribution to users that have helped with issues and prs
8 years ago
Jonathan Daggerhart
814a7e6ca7
Merge pull request #31 from robbiepaul/dev
...
Calls the wp_login action at the end of the login flow
8 years ago
Robbie Paul
82162ec753
Escape the error message
...
* This commit prevents a possible reflected XSS
8 years ago
Robbie Paul
672d7292e2
Include wp_login action after auth cookie is set
...
* Many plugins will hook in to this action, it should be at the end of any
WordPress login flow
* See: https://core.trac.wordpress.org/browser/tags/4.7.3/src/wp-includes/user.php#L104
8 years ago
Jonathan Daggerhart
b8ad2dd560
updating version and readmes
8 years ago
Jonathan Daggerhart
61c549189c
adding port to the request headers per issue #30
8 years ago
Jonathan Daggerhart
14133138a7
some method annotation corrections, and minor settings page typoes
8 years ago
Jonathan Daggerhart
54c43eb2b9
Merge pull request #27 from opencollector/moriyoshi/more-flexible-identity-settings
...
More flexible identity settings.
8 years ago
Moriyoshi Koizumi
0bbfc3437f
More flexible identity settings.
8 years ago
Jonathan Daggerhart
e723799397
updating change log with new reverse proxy support feature
8 years ago
Jonathan Daggerhart
4866765768
Merge pull request #25 from ahatherly/master
...
Set the Host header on http requests to openid-connect endpoint
8 years ago
Adam Hatherly
2281246816
Set the Host header on http requests to openid-connect endpoint so it works behind a reverse proxy
8 years ago
Jonathan Daggerhart
e7f390477c
fixing error on php 5.4
8 years ago
Jonathan Daggerhart
e4b1340dff
updating readmes for alternate redirect_uri
8 years ago
Jonathan Daggerhart
14d0ec44f6
Allow for the use of an alternate authentication route (redirect_uri) as opposed to the default admin-ajax method
8 years ago
Jonathan Daggerhart
0dc448fee5
clean up autoloader, default settings values, and validate refresh token result before attempting response
8 years ago
Jonathan Daggerhart
aafb5f7a2c
minor logger and settings page documentation improvements
8 years ago
Jonathan Daggerhart
6e9790c221
adding comments on new functions
8 years ago
Jonathan Daggerhart
403aa6ddeb
changing next-version number to represent a new features in the update
8 years ago
Jonathan Daggerhart
9992960752
updating plugin version and readme files
8 years ago
Jonathan Daggerhart
37579f7a90
Merge pull request #24 from rwasef1830/oidc_integrated_logout
...
OpenID Connect end_session_endpoint integrated logout support
8 years ago
Raif Atef
69930fcd3c
OpenID Connect end_session_endpoint integrated logout support.
8 years ago
Jonathan Daggerhart
0f2d8fc5a8
moving auto login redirect to a method that fires during hook init
8 years ago
Jonathan Daggerhart
ef97d0b8b8
Merge pull request #19 from rwasef1830/keep_oidc_button_on_login_with_error
...
In case of an error redirect and auto sso, keep the button and hide the normal form
8 years ago
Raif Atef
c377e50cfa
In case of an error redirect and auto sso, keep the openid connect button and hide the login form.
8 years ago
Jonathan Daggerhart
fede005f1f
fix autoloader for diff environments, use wp_remote_post instead of ‘get’, and move cookie setting to hook init
8 years ago
Jonathan Daggerhart
bf60b37f7e
Merge pull request #22 from rwasef1830/handle_optional_refresh_token
...
If IdP doesn't issue a refresh token, expire the session when the access token expires
8 years ago
Raif Atef
38f78cc274
If IdP doesn't issue a refresh token, expire the session when the access token expires.
8 years ago
Jonathan Daggerhart
2655668089
Merge pull request #20 from rwasef1830/fix_redirect_to_origin_for_error_redirect
...
Working to fix "redirect to origin" for error redirect
8 years ago
Raif Atef
2ff33dba41
Move redirect cookie set earlier to save origin on error redirect and clear it during the redirect.
8 years ago
Robert Staddon
954b72848f
Merge pull request #18 from rwasef1830/refresh_token_support
...
Refresh tokens when needed instead of logging out when access_token expires
8 years ago