 Jonathan Daggerhart | f81dbcc6e5f | Merge pull request #148 from benochen/contribution
Add a setting checkbox defining the behavior of the client if a ... | | |
Jonathan Daggerhart | 4a84b3c6518 | Merge pull request #183 from cs1m0n/increment_username_fix
Increment username just when link_existing_users is off | | |
Jonathan Daggerhart | d39c0da9906 | Merge pull request #189 from dxw/feature/actions-for-error-logging
Increase granularity of state token errors | | |
Jonathan Daggerhart | dc41454283f | Merge pull request #191 from dxw/feature/login-button-url-filter
Add filter for login form button URL | | |
Jonathan Daggerhart | cdcb1650294 | Merge pull request #193 from xRy-42/dev
Allow periods and spaces in usernames | | |
Eersink.Michael | d21bc60fbc2 | Allow periods and spaces in usernames
issue #141 | | |
Rob Skilling | 474f6cb3617 | Add filter for login form button URL
This will allow developers to e.g. redirect users to an intermediary page befor... | | |
Rob Skilling | 836500a495e | Increase detail of state token errors
Before: a missing state error could be returned for 3 reasons: a token was not... | | |
Jonathan Daggerhart | 43badcc5692 | Merge pull request #185 from vibbits/dev
RFC 3986 encode parameters in authentication URL | | |
James Collier | 8237aa5b84b | RFC 3986 encode parameters in authentication URL | | |
Jonathan Daggerhart | 9f8ed8a1950 | Merge pull request #184 from cs1m0n/delete_expired_transients
Delete expired transients | | |
Simon Costea | 0940c8c8631 | Delete expired transients | | |
Simon Costea | 8c82b86f297 | Increment username just when link_existing_users is off | | |
Jonathan Daggerhart | 9cd4bad7cc1 | Merge pull request #181 from bgeVam/patch-1
Add note on authentication url shortcode | | |
GeorgB | 0c83125c7af | Add note on authentication url shortcode | | |
Jonathan Daggerhart | f401b3f53bf | moving openid-connect-generic-alter-user-claim to top of method | | |
Jonathan Daggerhart | d35718dfef2 | documenting new filters before token validation | | |
Jonathan Daggerhart | f01a8bf6085 | Merge pull request #156 from ksimunovic/dev
Add two filters to modify received data before validation | | |
Jonathan Daggerhart | ab6fd4d77d2 | Merge pull request #173 from theseis/dev
Add logger to OpenID_Connect_Generic | | |
SYLVAIN PAILLASSE | 11695f56abc | Add logger to OpenID_Connect_Generic
(also remove code parameter value in the query stirng url for better reading of... | | |
Jonathan Daggerhart | 1147ca2416c | Merge pull request #171 from daggerhart/90-state-race
Fix race condition by replacing states option array with indiv... | | |
Jonathan Daggerhart | bf514cedef4 | cron job for cleaning up abandoned state transients | | |
Jonathan Daggerhart | 96bb449f391 | Fix race condition by replacing states option array with individual transients | | |
Karlo Šimunović | 47ea6d6ec3b | Add two filters to modify received $token_response and $id_token_claim before validation
This is related to daggerha... | | |
Moritz Bellach | 1f2b3171f08 | add Error messages on failed username transliteration/normalization | | |
benoit | 66a0b319d44 | Add a setting checkbox defining the behavior of the client if a user authenticates with a user not map with existing ... | | |
Jonathan Daggerhart | f42a587bf0b | Merge pull request #145 from TeDo-Verlag/notice-response-sent
avoid headers already sent error notice | | |
Jonathan Daggerhart | 1c126d11b85 | Merge pull request #146 from schamblee/issue-142
Allow multiple query params when redirecting back to origin | | |
Stephanie | 54d6784d449 | Allow multiple query params when redirecting back to origin | | |
Jonathan Daggerhart | 4955be3b71d | Merge pull request #137 from dfredell/patch-1
More logging on incomplete-user-claim | | |
gguseynov | a70fc8fe04e | avoid headers already sent error notice | | |
Dan Fredell | 8c5b265ca75 | More logging on incomplete-user-claim
Add logging so the user can more quickly discover which filed is unavailable d... | | |
Jonathan Daggerhart | 191c5659b8f | Merge pull request #131 from TeDo-Verlag/fix
Action is not running after update_existing_user() call | | |
gguseynov | caf3ea72679 | 1. run 'openid-connect-generic-update-user-using-current-claim' action
if existing user was updated
2. add_user_meta ... | | |
Jonathan Daggerhart | f3829b48e28 | documenting new action on user login | | |
Jonathan Daggerhart | 9f02df4cf63 | Merge pull request #127 from TeDo-Verlag/redirect
added force_redirect parameter and login action | | |
Gassan Gousseinov | 96b25f6c902 | added force_redirect parameter and login action | | |
Jonathan Daggerhart | acbd46c7173 | Merge pull request #126 from TeDo-Verlag/fix
fix stripos call | | |
Gassan Gousseinov | 11e89fd9b2d | fix stripos call | | |
Jonathan Daggerhart | 42402b69b5a | Merge pull request #124 from bookchiq/dev
Filter redirect URL before stashing it to a cookie | | |
Sarah Lewis | 39ae1f8a8f9 | Filter redirect URL before stashing it to a cookie | | |
Jonathan Daggerhart | f33225fc2cd | Issue #108: Attempt to fix regression for cookie during auto flow (#119) | | |
Jonathan Daggerhart | 9a204ebcae2 | Noting changes and bumping version for next release | | |
Jonathan Daggerhart | 6dfb0fafa55 | Issue #76: Avoid double question marks in auth url query string (#120) | | |
Raphaël Droz | f263fb4a164 | fix #106, wp-cli bootstrap must not inhibit custom rewrite rules (#110) | | |
Thijs Kinkhorst | d45ab06e3d4 | Fix syntax error in example openid-connect-generic-login-button-text hook (#113) | | |
Shane Mulligan | 0b51e9c1e59 | Change PHP keywords to comply with PSR2 (#116)
Signed-off-by: CodeLingoBot <bot@codelingo.io> | | |
Slavic Dragovtev | 6ecb69f1cb0 | Allow override of the plugin by posting credentials to wp-login.php (#118)
* allow overriding the plugin if credenti... | | |
Jonathan Daggerhart | a53f7532338 | Read me table of contents | | |
Jonathan Daggerhart | fd458b623a6 | Fixing incomplete example | | |
Jonathan Daggerhart | c27e12069a4 | Minor formatting on readme | | |
Jonathan Daggerhart | eec106b50e8 | Documenting hooks and other internals for contributors | | |
Jonathan Daggerhart | 4d7939e9e5e | Bug with some special char in the firstname or lastname
Add str_replace because token is encoded in base64 URL (and ... | | |
Jonathan Daggerhart | aca202f5ac8 | Additional readme updates | | |
Jonathan Daggerhart | 0a2572e781d | Readme and hooks | | |
Jonathan Daggerhart | 0d4e4bd0060 | additional error detection on user_claim | | |
Matt Varblow | 6917df262f3 | Allow identity providers which do not support the userinfo endpoint. (#100)
* Allow identity providers which do not ... | | |
cswebservice | 54f3ff41939 | allow developers to use the plain auth url by shortcode (#98)
* allow developers to use the plain auth url by shortc... | | |
Raphaël Droz | 87470689dba | avoid messing-up with wp-cli (#96)
When using wp-cli (eg: rewrite/cache flush), init() will run setcookie() which wo... | | |
Jonathan Daggerhart | 72305fcc9fa | Merge branch 'dev' | | |
Jonathan Daggerhart | 93d41ee3c6f | fixing composer.json and updateing readme | | |
Jonathan Daggerhart | e8545af1232 | nvm, wp.org can have it's own folder name | | |
Jonathan Daggerhart | 94e73af1b66 | renaming to match wordpress.org plugin slug | | |
Jonathan Daggerhart | 18625fbc21b | updating readme to include composer information | | |
Jonathan Daggerhart | 2a1b797e174 | fixing composer.json for packagist | | |
Jonathan Daggerhart | 64a4676c886 | trailing comma in json | | |
Jonathan Daggerhart | ef6fac4e41e | version update along with readmes. new composer.json to place on packagist | | |
Raphaël Droz | f3096b6f148 | fix a notice: If using traditional login, $token_response may be empty (#86)
fix a 404: In Bedrock-like layout confi... | | |
Raphaël Droz | f9c076a5c03 | hook: ability to filter claim and derived user data (#84) | | |
Raphaël Droz | 6263bee23bb | google provider: do not attempt to use their not-compliant /revoke endpoint (#83) | | |
Raphaël Droz | 58c8b7ac9a7 | disconnect hook: get user meta from information provided by filter parameters (#82) | | |
Raphaël Droz | d0b79313c24 | fixed a notice when cookie does not contain expected redirect_url (#80) | | |
Raphaël Droz | 756c3c05a14 | Translit names' special characters (#73)
When nickname is generated from a full name, intent to translit them to asc... | | |
Antti Leppä | 56bd5718e63 | Feature #68 state time limit option (#69)
* Added an option for state time limit on the settings page | | |
Jonathan Daggerhart | 6bc53f96d43 | some readme and metadata updates for plugin repo | | |
Jonathan Daggerhart | 9bf826c7041 | Merge pull request #66 from daggerhart/timeout
removed generic wp filter used for request timeout | | |
Jonathan Daggerhart | a99280600ae | removed generic wp filter used for request timeout | | |
Jonathan Daggerhart | c098e9da30e | Merge pull request #65 from daggerhart/prefix
Prefixes for better autoloading | | |
Jonathan Daggerhart | 326efbb416f | prefixing generic classes with oidcg comment class names. adjusting autoloading to look for the standardized prefix. | | |
Jonathan Daggerhart | 6f077c932a4 | incrementing to 3.3.x, updating readmes and changelog | | |
Jonathan Daggerhart | e02e4559652 | Merge pull request #52 from dirtsimple/wp_tokens
Simplify refresh/logout handling (to fix #49, #50, and #51) | | |
Jonathan Daggerhart | e541a9f3b4e | updating version | | |
PJ Eby | b14554e8fe2 | WP still supports PHP 5.2.4 :( | | |
PJ Eby | 662e9fb25bb | Track refresh token expiration (fixes #51) | | |
PJ Eby | caf13244990 | Defer logouts to after all WP plugins initialize | | |
PJ Eby | 134d0116b89 | Drop unnecessary user_meta keys | | |
PJ Eby | 7879835b496 | Store refresh token in sessions, instead of a cookie | | |
Jonathan Daggerhart | 06ed9dfdd8d | Exit after issuing a redirect
Terminate authentication_request_callback() after execution
Related issue: #46 | | |
Sven van Hal | 3869aa0fdea | Terminate authentication_request_callback() after execution | | |
Jonathan Daggerhart | 08af84a8516 | readme and changelog updates. minor whitespace update. | | |
Jonathan Daggerhart | 3683cd3286b | Merge pull request #42 from daggerhart/redirect-on-logout-as-setting
New setting to determine if users should be red... | | |
Jonathan Daggerhart | fb119dec5f1 | Add id_token_hint to end session logout redirect url
Thanks @skidos! | | |
Jonathan Daggerhart | c73d9f69560 | new setting allows administrator to determine if users should be redirected when their acces token expires. | | |
skidos | 059d672de24 | Update openid-connect-generic-client-wrapper.php
Add id_token_hint to end session logout redirect url
http://openi... | | |
Jonathan Daggerhart | cdf2629aa31 | Merge pull request #32 from robbiepaul/dev
Authentication URL can be modified | | |
Robbie Paul | 69a431793f9 | Authentication URL can be modified
Some OpenID Connect providers offer additional functionality by adding
query para... | | |
Jonathan Daggerhart | b64fab27be1 | breaking out changelog into its own file, providing attribution to users that have helped with issues and prs | | |
Jonathan Daggerhart | 814a7e6ca7c | Merge pull request #31 from robbiepaul/dev
Calls the wp_login action at the end of the login flow | | |
Robbie Paul | 82162ec753e | Escape the error message
* This commit prevents a possible reflected XSS | | |
Robbie Paul | 672d7292e2f | Include wp_login action after auth cookie is set
* Many plugins will hook in to this action, it should be at the end... | | |
Jonathan Daggerhart | b8ad2dd5604 | updating version and readmes | | |
Jonathan Daggerhart | 61c549189cb | adding port to the request headers per issue #30 | | |
Jonathan Daggerhart | 14133138a79 | some method annotation corrections, and minor settings page typoes | | |
Jonathan Daggerhart | 54c43eb2b9c | Merge pull request #27 from opencollector/moriyoshi/more-flexible-identity-settings
More flexible identity settings. | | |
Moriyoshi Koizumi | 0bbfc3437f1 | More flexible identity settings. | | |
Jonathan Daggerhart | e7237993976 | updating change log with new reverse proxy support feature | | |
Jonathan Daggerhart | 48667657681 | Merge pull request #25 from ahatherly/master
Set the Host header on http requests to openid-connect endpoint | | |
Adam Hatherly | 2281246816f | Set the Host header on http requests to openid-connect endpoint so it works behind a reverse proxy | | |
Jonathan Daggerhart | e7f390477c1 | fixing error on php 5.4 | | |
Jonathan Daggerhart | e4b1340dff0 | updating readmes for alternate redirect_uri | | |
Jonathan Daggerhart | 14d0ec44f63 | Allow for the use of an alternate authentication route (redirect_uri) as opposed to the default admin-ajax method | | |
Jonathan Daggerhart | 0dc448fee5b | clean up autoloader, default settings values, and validate refresh token result before attempting response | | |
Jonathan Daggerhart | aafb5f7a2c4 | minor logger and settings page documentation improvements | | |
Jonathan Daggerhart | 6e9790c221b | adding comments on new functions | | |
Jonathan Daggerhart | 403aa6ddebb | changing next-version number to represent a new features in the update | | |
Jonathan Daggerhart | 99929607525 | updating plugin version and readme files | | |
Jonathan Daggerhart | 37579f7a908 | Merge pull request #24 from rwasef1830/oidc_integrated_logout
OpenID Connect end_session_endpoint integrated logout ... | | |
Raif Atef | 69930fcd3cb | OpenID Connect end_session_endpoint integrated logout support. | | |
Jonathan Daggerhart | 0f2d8fc5a83 | moving auto login redirect to a method that fires during hook init | | |
Jonathan Daggerhart | ef97d0b8b87 | Merge pull request #19 from rwasef1830/keep_oidc_button_on_login_with_error
In case of an error redirect and auto ss... | | |
Raif Atef | c377e50cfa1 | In case of an error redirect and auto sso, keep the openid connect button and hide the login form. | | |
Jonathan Daggerhart | fede005f1ff | fix autoloader for diff environments, use wp_remote_post instead of ‘get’, and move cookie setting to hook init | | |
Jonathan Daggerhart | bf60b37f7e5 | Merge pull request #22 from rwasef1830/handle_optional_refresh_token
If IdP doesn't issue a refresh token, expire th... | | |
Raif Atef | 38f78cc2745 | If IdP doesn't issue a refresh token, expire the session when the access token expires. | | |
Jonathan Daggerhart | 2655668089c | Merge pull request #20 from rwasef1830/fix_redirect_to_origin_for_error_redirect
Working to fix "redirect to origin"... | | |
Raif Atef | 2ff33dba415 | Move redirect cookie set earlier to save origin on error redirect and clear it during the redirect. | | |
Robert Staddon | 954b72848fe | Merge pull request #18 from rwasef1830/refresh_token_support
Refresh tokens when needed instead of logging out when ... | | |
Raif Atef | a47f6d2bfc4 | Refresh tokens when needed instead of logging out when access_token expires.
- refresh_token + access_token expiry i... | | |
Robert Staddon | 29c223c6067 | Merge pull request #17 from daggerhart/master
Make token_type check in validate_token_response case-insensitive (Fix... | | |
Robert Staddon | 5d0ad041235 | Merge pull request #16 from rwasef1830/token_type_case_insensitive
Fix issue #15 | | |
Raif Atef | d8a043a6c70 | Make token_type check in validate_token_response case-insensitive (Fixes issue #15). | | |
Robert Staddon | f2d2a8083b1 | Merge pull request #10 from wgengarelly/master
Added hook for existing user login allowing others to take action usi... | | |
wgengarelly | 257216e148e | Added [openid-connect-generic-update-user-using-current-claim] action hook allowing other plugins/themes
to take ac... | | |
Robert Staddon | 1c471f84ed4 | Merge pull request #9 from wgengarelly/master
Send access token in the Authorization header when requesting user info | | |
wgengarelly | 08d9f58d0de | When requesting userinfo, send the access token using the Authorization header field as recommended in section 5.3.1 ... | | |
Robert Staddon | 1002943a223 | Merge pull request #8 from robertstaddon/master
Allow users to login with WP account after using OpenID Connect | | |
Robert Staddon | 960f475aada | Update readme and version numbers for 3.0.6 | | |
Robert Staddon | db32baa60e0 | Allow users to login with WP account after using OpenID Connect
Resolve a bug that prevented users from logging in w... | | |
Robert Staddon | 326a2cd2138 | Merge remote-tracking branch 'refs/remotes/daggerhart/master' | | |
Robert Staddon | e2ab1b18d82 | Merge pull request #6 from robertstaddon/master
Add OpenID Connect button shortcode for insertion on any login form | | |
Robert Staddon | f5c5ff89089 | Add an action hook before the redirect | | |
Robert Staddon | 74153ec3634 | Support "redirect_to" parameter on login page | | |
Robert Staddon | 6cd6cc126a4 | Record the URL of the current page when creating a login button | | |
Robert Staddon | 398612eaf16 | Redirect to origin page instead of home page if setting enabled
To know the origin page URL, read the value of a coo... | | |
Robert Staddon | 6b5d6a97829 | Add "Redirect Back to Origin Page" setting
This setting would override the default action of redirecting the user
to... | | |
Robert Staddon | 669e3b8030a | Add shortcode for login button
[openid_connect_generic_login_button] | | |
Robert Staddon | 8852c9d52e3 | Increment version and update readme | | |
Robert Staddon | 65d4115145d | Merge remote-tracking branch 'refs/remotes/origin/master' into daggerhart/master | | |
Robert Staddon | 66ee62b3990 | Merge remote-tracking branch 'refs/remotes/daggerhart/master' | | |
Jonathan Daggerhart | b737eac5185 | Merge pull request #5 from robertstaddon/master
Allow users with existing WordPress accounts to log in | | |
Robert Staddon | 9371b8132fc | Only link existing users if the setting is enabled | | |
Robert Staddon | 494cb43c491 | Only link existing user if the setting is enabled | | |
Robert Staddon | 3777f930ecf | Add setting to Link Existing Users
Add a setting to allow the site admin to decide how to handle the OpenID
Connect ... | | |
Robert Staddon | 1de016485b4 | Allow users with existing WordPress accounts to sign in
An error occurs if a user with an existing WordPress account... | | |
daggerhart | 7905bfdd12a | incrementing version, updating readmes | | |
daggerhart | 94dd9458430 | fixing desired_username variable typo | | |
daggerhart | 6715eb2baff | using wp's is_ssl() function for setcookie()'s secure parameter | | |
daggerhart | 4db956c1191 | bug: wrong variable as error data | | |
Jonathan Daggerhart | e6da3154a49 | incrementing version 3.0.2 | | |
Jonathan Daggerhart | 43a5d7110e2 | allow for very-granular default settings so that updates can make use of default values | | |
Jonathan Daggerhart | ada93ba4f3f | Added setting for http_response_timeout | | |
Jonathan Daggerhart | d0ceb60a374 | settings upgrade to follow refactoring | | |
Jonathan Daggerhart | 822c2befd35 | typo in hook name | | |
Jonathan Daggerhart | a0b882743b1 | better user check in logs table | | |
Jonathan Daggerhart | af0bbe6bbed | updating version number and readme. prepared upgrade flow | | |
Jonathan Daggerhart | 9b2dd296592 | Method comments, and unique errors | | |
Jonathan Daggerhart | c6460784212 | refactoring some internal settings for clarity | | |
Jonathan Daggerhart | 2e3167fa206 | major refactor to separate responsibility | | |
Jonathan Daggerhart | 0ddb501a553 | whitespace- switching to sweet-sweet tabs | | |
Jonathan Daggerhart | 782e674def8 | first attempt at logging. needs a big refactor some day | | |
Jonathan Daggerhart | bac8b481d67 | changing how usernames are determined. | | |
Jonathan Daggerhart | 3a04abcb4f4 | fixing old debug code | | |
Jonathan Daggerhart | 506ac3b338e | fixing bad identity_key check | | |
Jonathan Daggerhart | b03876e0bb7 | fix broken settings fields, added some admin notes | | |
Jonathan Daggerhart | fe3896099d4 | un-lazying approach to getting the first user from a query result | | |
Jonathan Daggerhart | 8cce143275c | admin field fixes | | |
Jonathan Daggerhart | a1023f966d1 | more hooks for other plugins and themes to interrupt the login or user creation flow. new hook for custom handling o... | | |
Jonathan Daggerhart | 8f792be29e8 | typos and touch ups | | |
Jonathan Daggerhart | 1048b0b046c | markdown readme for github | | |
Jonathan Daggerhart | 76be3ba371a | Added readme, improved some comments | | |
daggerhart | 7ce9613650e | initial commit of working plugin | | |
| Done |
