forumone / openid-connect-wp
OpenID Connect generic WordPress plugin.
Installs: 176
Dependents: 0
Suggesters: 0
Security: 0
Stars: 5
Watchers: 10
Forks: 0
Open Issues: 0
Type:wordpress-plugin
Requires
- php: >=7.4
- composer/installers: ~1.0|~2.0
Requires (Dev)
- php: >=7.4
- brain/monkey: ^2.6
- dealerdirect/phpcodesniffer-composer-installer: ^1.0
- johnpbloch/wordpress-core: ~6.6.0
- johnpbloch/wordpress-core-installer: ^2.0
- mockery/mockery: ^1.5
- php-stubs/wordpress-stubs: ~6.6.0
- phpro/grumphp: ^1.16
- phpstan/extension-installer: ^1.3
- phpstan/phpstan: ^1.10
- phpstan/phpstan-deprecation-rules: ^1.1
- phpunit/phpunit: ^9.6.0
- roave/security-advisories: dev-master
- squizlabs/php_codesniffer: ^3.7
- szepeviktor/phpstan-wordpress: ^1.3
- wp-coding-standards/wpcs: ^3.0.0
- wp-phpunit/wp-phpunit: ~6.6.0
- wpackagist-plugin/debug-bar: *
- wpackagist-plugin/debug-bar-actions-and-filters-addon: *
- wpackagist-plugin/display-environment-type: *
- wpackagist-plugin/health-check: *
- wpackagist-plugin/query-monitor: *
- wpackagist-plugin/transients-manager: *
- wpackagist-theme/twentytwentythree: *
- yoast/phpunit-polyfills: ^2.0
This package is auto-updated.
Last update: 2025-01-31 20:37:45 UTC
README
Contributors: daggerhart, tnolte, forum1
Tags: security, login, oauth2, openidconnect, apps, authentication, autologin, sso
Requires at least: 5.0
Tested up to: 6.6.2
Stable tag: 0.0.0
Requires PHP: 7.4
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html
A simple client that provides SSO or opt-in authentication against a generic OAuth2 Server implementation.
NOTE: This is a supported hard fork of the OpenID Connect Generic plugin in coordination with Jonathan Daggerhart.
Description
This plugin allows to authenticate users against OpenID Connect OAuth2 API with Authorization Code Flow. Once installed, it can be configured to automatically authenticate users (SSO), or provide a "Login with OpenID Connect" button on the login form. After consent has been obtained, an existing user is automatically logged into WordPress, while new users are created in WordPress database.
Much of the documentation can be found on the Settings > OpenID Connect for WP dashboard page.
Please submit issues to the Github repo: https://github.com/forumone/openid-connect-wp-dist
Installation
Manual
- Upload to the
/wp-content/plugins/directory. - Activate the plugin.
- Visit "Settings" -> "OpenID Connect" and configure to meet your needs.
Git Updater
- Download the free version, or purchase the premium version, of the Git Updater plugin.
- Upload to the
/wp-content/plugins/directory. - Activate the plugin.
- Follow the plugin installation instructions on the Git Updater website.
Composer
- Run
composer require forumone/openid-connect-wpto add to your Composer-based site.
Frequently Asked Questions
What is the client's Redirect URI?
Most OAuth2 servers will require whitelisting a set of redirect URIs for security purposes. The Redirect URI provided by this client is like so: https://example.com/wp-admin/admin-ajax.php?action=openid-connect-authorize
Replace example.com with your domain name and path to WordPress.
Can I change the client's Redirect URI?
Some OAuth2 servers do not allow for a client redirect URI to contain a query string. The default URI provided by
this module leverages WordPress's admin-ajax.php endpoint as an easy way to provide a route that does not include
HTML, but this will naturally involve a query string. Fortunately, this plugin provides a setting that will make use of
an alternate redirect URI that does not include a query string.
On the settings page for this plugin (Dashboard > Settings > OpenID Connect for WP) there is a checkbox for
Alternate Redirect URI. When checked, the plugin will use the Redirect URI
https://example.com/openid-connect-authorize.