webapp/bookstack
1
0
Fork 0
mirror of https://github.com/BookStackApp/BookStack.git synced 2025-07-30 04:23:11 +03:00
Code Activity

OIDC Userinfo: Added JWT signed response support

Browse Source 
Not yet tested, nor checked all response validations.
This commit is contained in:
Dan Brown
2024-04-19 14:12:27 +01:00
parent fa543bbd4d
commit b18cee3dc4
4 changed files with 196 additions and 144 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/Access/Oidc/OidcService.php
View File

@ -246,7 +246,11 @@ class OidcService
if (!$userDetails->isFullyPopulated($this->shouldSyncGroups()) && !empty($settings->userinfoEndpoint)) {
$provider = $this->getProvider($settings);
$request = $provider->getAuthenticatedRequest('GET', $settings->userinfoEndpoint, $accessToken->getToken());
$response = new OidcUserinfoResponse($provider->getResponse($request));
$response = new OidcUserinfoResponse(
$provider->getResponse($request),
$settings->issuer,
$settings->keys,
);
try {
$response->validate($idToken->getClaim('sub'));