-
Notifications
You must be signed in to change notification settings - Fork 96
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update JWT library #576
Update JWT library #576
Conversation
7659cf9
to
f291df0
Compare
…gin; switch userinfo call to ID token
f291df0
to
1f389de
Compare
Codecov Report
@@ Coverage Diff @@
## master #576 +/- ##
============================================
+ Coverage 21.27% 21.33% +0.06%
+ Complexity 1313 1309 -4
============================================
Files 51 51
Lines 4278 4265 -13
============================================
Hits 910 910
+ Misses 3368 3355 -13
Continue to review full report at Codecov.
|
$userinfo_resp_code | ||
); | ||
} | ||
// Management API call failed, fallback to ID token. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What would be the expectation for a management API call to fail?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If Client Credential Grant is turned off
Code is mostly the JWT Lib changes, thanks for adding you changed leeway as it's hard to tell if you changed anything vs changes that came from the update. That's a big jump in Majors from 2.0 to 5.0. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
Changes
/userinfo
, replace with ID tokenWP_Auth0_LoginManager::clean_id_token()
InvalidArgumentException
catching inWP_Auth0_LoginManager::init_auth0()
WP_Auth0_LoginManager::implicit_login()
(handled in calling method)References
Testing
No testing is in place for the login flow as it's highly coupled.