Skip to content
This repository has been archived by the owner on Nov 24, 2022. It is now read-only.

Upgrade to latest version #2

Open
wants to merge 103 commits into
base: master
Choose a base branch
from
Open

Conversation

aronszabo
Copy link
Member

No description provided.

lindyblackburn and others added 30 commits February 23, 2020 02:27
Keycloak 10 returns the error "invalid_scope" when a client tries to
get an access token with no scopes.

Fix it.

Signed-off-by: Naoto Kobayashi <[email protected]>
correct check for duplicate email
using composer for the oauth lib dependency, autoloading for our own
classes. Services are now their own action plugins to inherit from our
Service class.

All still untested and broken
somewhat works already
This manually applies daviddesberg/PHPoAuthLib#567 once it has been
merged, a proper composer checkout should be used again
we want to force backend implementors to think about scopes
flag indicating that login is in progress was not cleared from session
Add Keycloak scope to support Keycloak 10
The new OAuthManager is now the main flow manager and should make it
easier to follow the flow. The Session class encapsulates all session
and cookie accesses. A new guid paradigma should make invisible relogins
possible when the session expired. Needs all major cleanup but a first
login worked.
annda and others added 30 commits March 24, 2022 12:59
Update local user data with info from provider
This is a new implementation of the group handling introduced in #125

The previous implementation failed to preserve provider groups
properly. This also adds tests for the behaviour.
There is no need to update the local user on every login when nothing
has changed.

This should fix most instances of #132 - if the oAuth provider data has
actually updated, the user would have to log into the farmer to update
the data though.
The farmer lets us know when a user is protected and can't be written,
so we can actually skip the update completely. fixes #132 for good
We do not really care for the password in the session and usually don't
even have it when authenticating via oAuth.

This fixes a warning on PHP 8+
This is to exclude unrelated files for installation
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

10 participants