Skip to content

merging dev at 1.0.0 release#4

Merged
mscurtescu merged 62 commits intomainfrom
dev
Nov 10, 2022
Merged

merging dev at 1.0.0 release#4
mscurtescu merged 62 commits intomainfrom
dev

Conversation

@mscurtescu
Copy link
Copy Markdown
Contributor

@mscurtescu mscurtescu commented Nov 10, 2022

All Submissions:

Changes proposed in this Pull Request:

  • Initial release of the Hellō Login.

How to test the changes in this Pull Request:

  1. Install and activate in WordPress
  2. Perform Hellō Quickstart at Settings > Hellō Login
  3. Logout from WordPress
  4. Go to /wp-login.php and sign-in using "Continue with Hellō"

Changelog entry

Enter a summary of all changes on this Pull Request. This will appear in the changelog if accepted.

  • Merged PR that adds PKCE support
  • Integrated Hellō Quickstart
  • Removed unnecessary configuration options
  • Renamed all relevant identifiers to be Hellō Login specific

petitphp and others added 30 commits July 11, 2022 15:04
Add new setting to enable/disable PKCE feature. A new constant
OIDC_ENABLE_PKCE is available to force the setting's value.
Update new state creation method to take an additional parameter
with the PKCE code verifier 's value and store it in the state
value.
The method will try to generate a code verifier (a random ASCII string)
and a code challenge (SHA256 hash of the verifier) and return an
array with them and the method use to create the code challenge.

If the code verifier generation fails the method will return false.
This is the first step when integrating PKCE into the authentication
workflow. When building the authentication URL a new code verifier
and challenge are created, the code verifier is store in the state
to be accessible at a later stage and the challenge is added as a
query param to the URL along side the method use to generate the
challenge from the verifier.
This is the second step when integrating PKCE into the authentication
workflow. Add the code verifier to the auth token request's body.
Code verifier is retieved from the state object created when building
the authentication URL.
mscurtescu and others added 29 commits November 8, 2022 08:52
@mscurtescu mscurtescu merged commit 01201d8 into main Nov 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants