openid-connect-generic

openid-connect-generic copied to clipboard

save_refresh_token may delete valid refresh_token and break refresh functionality

3

**Describe the bug** `save_refresh_token()` is called after the initial request. In our case of interest, the payload bring a `request_token` field (in the case of Google, this happens if `access_type=offline`....

drzraf

Session refresh should happen in determine_current_user

9

The current strategy for refreshing tokens and expiring the current session is to run at `init` or `wp_loaded`, but after observing the many corner cases for logout and token timeouts...

pjeby

handle session expiration (and corresponding admin popup)

3

We usually can not set the session validity (which depends upon the ID provider). Eg: 1h for Google. When editing, we end up with a popup: "Your session has expired....

drzraf

Hello, I've looked and searched and I only found how to do the opposite, which is updating the user role on WordPress based on the user claim. What I want...

Yousashi

Query String Parameters Not Included in Redirect URL

3

When the "redirect_user_back" setting is true, and the page has a query string parameter (a custom query string parameter, unrelated to any WordPress query string parameters), and uses a permalink,...

nhayduk

### All Submissions: * [ ] Have you followed the [plugin Contributing guideline](https://github.com/oidc-wp/openid-connect-generi/blob/dev/.github/CONTRIBUTING.md)? * [ ] Does your code follow the [WordPress' coding standards](https://make.wordpress.org/core/handbook/best-practices/coding-standards/)? * [ ] Have you checked...

timnolte

The mandatory 'code_challenge' parameter is missing.

4

**Describe the bug** After configuring all settings, when the login button is clicked, I get the error: error:invalid_request error_description:The mandatory 'code_challenge' parameter is missing. error_uri:https://documentation.openiddict.com/errors/ID2029 Even after removing the PKCE...

elfico

feat(#272): support ongoing update of user data from claims

1

### All Submissions: * [X] Have you followed the [plugin Contributing guideline](https://github.com/oidc-wp/openid-connect-generi/blob/dev/.github/CONTRIBUTING.md)? * [X] Does your code follow the [WordPress' coding standards](https://make.wordpress.org/core/handbook/best-practices/coding-standards/)? * [X] Have you checked to ensure there...

FloppyNotFound

Optionally forbid password login if SSO is enabled and account is linked

1

**Describe the solution you'd like** Plugin configuration could contain a checkbox to only allow password-based login if the user isn't attached to an SSO user, this would reduce the chances...

TaaviE

Provide new filter for alternate_redirect_uri

2

This is currently untested. Just a starting point. ### All Submissions: * [ ] Have you followed the [plugin Contributing guideline](https://github.com/oidc-wp/openid-connect-generi/blob/dev/.github/CONTRIBUTING.md)? * [ ] Does your code follow the [WordPress'...

daggerhart