stable

Clone or download

Read-only

Make the OAuth2/OIDC JWKS endpoint public

This endpoint will not change even with a "custom" authorization endpoint, it should be public. Accessing `GET /oauth2/jwks` should still work after this patch. Part of story #24227: have private oauth2 endpoints for Mediawiki Change-Id: Id6d8b100780bb630e4404c71a7cfd4efca19cbbb

Modified Files

Name
M plugins/oauth2_server/db/install.sql +0 −7 Go to diff View file
A plugins/oauth2_server/db/mysql/2022/202201271155_move_oidc_signing_key_table_to_core.php +35 −0 Go to diff View file
M plugins/oauth2_server/db/uninstall.sql +0 −1 Go to diff View file
M plugins/oauth2_server/include/OpenIDConnect/IDToken/OpenIDConnectIDTokenCreator.php +1 −0 Go to diff View file
M plugins/oauth2_server/include/oauth2_serverPlugin.php +8 −30 Go to diff View file
M plugins/oauth2_server/tests/unit/OpenIDConnect/IDToken/OpenIDConnectIDTokenCreatorTest.php +3 −0 Go to diff View file
A src/common/OAuth2ServerCore/OAuth2ServerRoutes.php +100 −0 Go to diff View file
R plugins/oauth2_server/include/OpenIDConnect/IDToken/OpenIDConnectSigningKeyDAO.php Go to diff View file
R plugins/oauth2_server/include/OpenIDConnect/IDToken/OpenIDConnectSigningKeyFactory.php Go to diff View file
R plugins/oauth2_server/include/OpenIDConnect/IDToken/SigningPrivateKey.php Go to diff View file
R plugins/oauth2_server/include/OpenIDConnect/IDToken/SigningPublicKey.php Go to diff View file
R plugins/oauth2_server/include/OpenIDConnect/JWK/InvalidPublicRSAKeyPEMFormatException.php Go to diff View file
R plugins/oauth2_server/include/OpenIDConnect/JWK/JSONWebKey.php Go to diff View file
R plugins/oauth2_server/include/OpenIDConnect/JWK/JSONWebKeySet.php Go to diff View file
R plugins/oauth2_server/include/OpenIDConnect/JWK/JWKSDocumentEndpointController.php Go to diff View file
M src/common/Request/RouteCollector.php +3 −38 Go to diff View file
M src/db/mysql/database_structure.sql +7 −0 Go to diff View file
A src/db/mysql/updates/2022/202201271150_create_oauth2_server_oidc_signing_key_table.php +42 −0 Go to diff View file
R plugins/oauth2_server/tests/integration/OpenIDConnect/IDToken/OpenIDConnectSigningKeyDAOTest.php Go to diff View file
R plugins/oauth2_server/tests/unit/OpenIDConnect/IDToken/OpenIDConnectSigningKeyFactoryTest.php Go to diff View file
R plugins/oauth2_server/tests/unit/OpenIDConnect/IDToken/SigningPrivateKeyTest.php Go to diff View file
R plugins/oauth2_server/tests/unit/OpenIDConnect/IDToken/SigningPublicKeyTest.php Go to diff View file
R plugins/oauth2_server/tests/unit/OpenIDConnect/JWK/JSONWebKeySetTest.php Go to diff View file
R plugins/oauth2_server/tests/unit/OpenIDConnect/JWK/JSONWebKeyTest.php Go to diff View file
R plugins/oauth2_server/tests/unit/OpenIDConnect/JWK/JWKSDocumentEndpointControllerTest.php Go to diff View file