Skip to main content
Agency Program Get 2× more leads and save 50% on hosting. Built for agencies ready to grow. Book a call
OpenID Connect Generic Client icon

OpenID Connect Generic Client

v3.10.0
by Jonathan Daggerhart · 5.0 (19 reviews)

A simple client that provides SSO or opt-in authentication against a generic OAuth2 Server implementation.

9K+ active installs Updated Apr 09, 2024 Tested to 6.4.5 Requires PHP 7.4
Try Demo Download
Pre-installed Ready in ~10s No card

About OpenID Connect Generic Client

This plugin allows users to authenticate using OpenID Connect OAuth2 API with Authorization Code Flow. It can be set up to automatically authenticate users or provide a login button on the login form. Existing users will be logged in automatically, while new users will be created in the WordPress database.

Changelog

3.10.0

  • Chore: @timnolte – Dependency updates.
  • Fix: @drzraf – Prevents running the auth url filter twice.
  • Fix: @timnolte – Updates the log cleanup handling to properly retain the configured number of log entries.
  • Fix: @timnolte – Updates the log display output to reflect the log retention policy.
  • Chore: @timnolte – Adds Unit Testing & New Local Development Environment.
  • Feature: @timnolte – Updates logging to allow for tracking processing time.
  • Feature: @menno-ll – Adds a remember me feature via a new filter.
  • Improvement: @menno-ll – Updates WP Cookie Expiration to Same as Session Length.

3.9.1

  • Improvement: @timnolte – Refactors Composer setup and GitHub Actions.
  • Improvement: @timnolte – Bumps WordPress tested version compatibility.

3.9.0

  • Feature: @matchaxnb – Added support for additional configuration constants.
  • Feature: @schanzen – Added support for agregated claims.
  • Fix: @rkcreation – Fixed access token not updating user metadata after login.
  • Fix: @danc1248 – Fixed user creation issue on Multisite Networks.
  • Feature: @RobjS – Added plugin singleton to support for more developer customization.
  • Feature: @jkouris – Added action hook to allow custom handling of session expiration.
  • Fix: @tommcc – Fixed admin CSS loading only on the plugin settings screen.
  • Feature: @rkcreation – Added method to refresh the user claim.
  • Feature: @Glowsome – Added acr_values support & verification checks that it when defined in options is honored.
  • Fix: @timnolte – Fixed regression which caused improper fallback on missing claims.
  • Fix: @slykar – Fixed missing query string handling in redirect URL.
  • Fix: @timnolte – Fixed issue with some user linking and user creation handling.
  • Improvement: @timnolte – Fixed plugin settings typos and screen formatting.
  • Security: @timnolte – Updated build tooling security vulnerabilities.
  • Improvement: @timnolte – Changed build tooling scripts.

3.8.5

  • Fix: @timnolte – Fixed missing URL request validation before use & ensure proper current page URL is setup for Redirect Back.
  • Fix: @timnolte – Fixed Redirect URL Logic to Handle Sub-directory Installs.
  • Fix: @timnolte – Fixed issue with redirecting user back when the openid_connect_generic_auth_url shortcode is used.

3.8.4

  • Fix: @timnolte – Fixed invalid State object access for redirection handling.
  • Improvement: @timnolte – Fixed local wp-env Docker development environment.
  • Improvement: @timnolte – Fixed Composer scripts for linting and static analysis.

3.8.3

  • Fix: @timnolte – Fixed problems with proper redirect handling.
  • Improvement: @timnolte – Changes redirect handling to use State instead of cookies.
  • Improvement: @timnolte – Refactored additional code to meet coding standards.

3.8.2

  • Fix: @timnolte – Fixed reported XSS vulnerability on WordPress login screen.

3.8.1

  • Fix: @timnolte – Prevent SSO redirect on password protected posts.
  • Fix: @timnolte – CI/CD build issues.
  • Fix: @timnolte – Invalid redirect handling on logout for Auto Login setting.

3.8.0

  • Feature: @timnolte – Ability to use 6 new constants for setting client configuration instead of storing in the DB.
  • Improvement: @timnolte – Plugin development & contribution updates.
  • Improvement: @timnolte – Refactored to meet WordPress coding standards.
  • Improvement: @timnolte – Refactored to provide localization.

See the previous changelogs here

Try other plugins