stable

Clone or download

Read-only

request #9403: User info endpoint should not be mandatory

This endpoint is not mandatory as we can see in the specification [1] [2] so it should not be mandatory on our side. For example, CoreOS dex does not support it [3] or Yahoo does not gives it in the discovery file they provide [4]. [1] https://openid.net/specs/openid-connect-core-1_0.html#CodeFlowSteps [2] https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata [3] https://github.com/coreos/dex/blob/master/Documentation/oidc-notes.md [4] https://login.yahoo.com/.well-known/openid-configuration Change-Id: I636a8d3c782d6f0daa919466190b73eb91cd7333

Modified Files

Name
M plugins/openidconnectclient/include/OpenIDConnectClient/Administration/Controller.php +2 −2 Go to diff View file
M plugins/openidconnectclient/include/OpenIDConnectClient/Authentication/Flow.php +16 −0 Go to diff View file
M plugins/openidconnectclient/include/OpenIDConnectClient/Provider/ProviderManager.php +5 −3 Go to diff View file
M plugins/openidconnectclient/templates/administration-providers-modal-create.mustache +6 −6 Go to diff View file
M plugins/openidconnectclient/templates/administration-providers-modal-update.mustache +6 −6 Go to diff View file
M plugins/openidconnectclient/templates/administration-providers.mustache +2 −0 Go to diff View file
M plugins/openidconnectclient/tests/Provider/ProviderManagerTest.php +19 −0 Go to diff View file
M plugins/openidconnectclient/www/themes/default/css/style.scss +4 −0 Go to diff View file