Update from upstream repo jumbojett/OpenID-Connect-PHP@master #2
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Fix $this->$enc-type to $this->enc-type
Add OAuth 2.0 Token Revocation - rfc7009
added issuer validator
[Security Fix] Added strict type comparisons
reset() desires a variable
Adding signing algorithm PS256
move phpunit to require-dev
Check status code of requestUserInfo
Check http staus of request user info
URL encode basic auth user and password according to https://tools.ietf.org/html/rfc6749#section-2.3.1
URL encode basic auth user and password
* Fix: Update well known config value function response types * Update CHANGELOG * Update wellknown typing array to be string[] * Update wellknown typing null can be default but would never be returned
* Add php 8.3 to test matrix in github actions and updated actions * Updated readme PHP requirement to PHP 7.0+ * Added dependabot for GitHub Actions
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v2...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/cache](https://github.com/actions/cache) from 3 to 4. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v3...v4) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…JWT claims (#406) * Check if subject is equal to subject of id token when verifying JWT claims * Add fake sub in test claims
…xists when needed (#373) * Removed duplicate check on jwks_uri * Update CHANGELOG * Only check jwks_uri when needed * Update changelog
* Update phpseclib/phpseclib to minimum 2.0.31 or 3.0.7 * Update composer.json
… to ^2.0 (#430) * chore(deps-dev): update yoast/phpunit-polyfills requirement Updates the requirements on [yoast/phpunit-polyfills](https://github.com/Yoast/PHPUnit-Polyfills) to permit the latest version. - [Release notes](https://github.com/Yoast/PHPUnit-Polyfills/releases) - [Changelog](https://github.com/Yoast/PHPUnit-Polyfills/blob/2.x/CHANGELOG.md) - [Commits](Yoast/PHPUnit-Polyfills@1.0.0...2.0.1) --- updated-dependencies: - dependency-name: yoast/phpunit-polyfills dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]> * fix: remove --verbose from phpunit * fix: force usage of phpunit < 10 --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Thomas Müller <[email protected]>
... when ClientID does not match Co-authored-by: Robert Vogel <[email protected]>
* Fix PHP 8.4 deprecation: Implicitly marking parameter as nullable is deprecated * fix php version in build.yml and README.md
* Add check to verify sub is set * Update CHANGELOG.md * Add tests
* Add setLeeway * Update changelog
* Fix missing exp validation on backchannel logout * Update changelog
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Hello!
The upstream repository
jumbojett/OpenID-Connect-PHP@masterhas some new changes that aren't in this fork. So, here they are, ready to be merged! 🎉If this pull request can be merged without conflict, you can publish your software with these new changes. Otherwise, fix any merge conflicts by clicking the
Resolve Conflictsbutton.If you like Backstroke, consider donating to help us pay for infrastructure here. Backstroke is a completely open source project that's free to use, but we survive on sponsorships and donations. Thanks for your support! Help out Backstroke.
Created by Backstroke (I'm a bot!)