OpenID Connect Server

Alternatively, you can also put them outside the webroot and load them from the files like this:

define( 'OIDC_PUBLIC_KEY', file_get_contents( '/web-inaccessible/oidc.key' ) );
define( 'OIDC_PRIVATE_KEY', file_get_contents( '/web-inaccessible/private.key' ) );

Define the clients

Define your clients by adding a filter to oidc_registered_clients in a separate plugin file or functions.php of your theme or in a MU-plugin like:

add_filter( 'oidc_registered_clients', 'my_oidc_clients' );
function my_oidc_clients() {
    return array(
        'client_id_random_string' => array(
            'name' => 'The name of the Client',
            'secret' => 'a secret string',
            'redirect_uri' => 'https://example.com/redirect.uri',
            'grant_types' => array( 'authorization_code' ),
            'scope' => 'openid profile',
        ),
    );
}

Exclude URL from caching

• example.com/wp-json/openid-connect/userinfo: We implement caching exclusion measures for this endpoint by setting Cache-Control: 'no-cache' headers and defining the DONOTCACHEPAGE constant. If you have a unique caching configuration, please ensure that you manually exclude this URL from caching.

Github Repo

You can report any issues you encounter directly on Github repo: Automattic/wp-openid-connect-server

• [Breaking] Add a configuration option to support clients that don’t require consent #118 props @lart2150
• Make client_id and client_secret optional for the token endpoint #116 props @lart2150
• Update expected args specs for token endpoint as per OIDC spec #117

1.3.4

• Add the autoloader to the uninstall script #111 props @MariaMozgunova

1.3.3

• Fix failing login when Authorize form is non-English [#108]
• Improvements in site health tests for key detection [#104][#105]

1.3.2

• Prevent userinfo endpoint from being cached [#99]

1.3.0

• Return display_name as the name property [#87]
• Change text domain to openid-connect-server, instead of wp-openid-connect-server [#88]

1.2.1

• No user facing changes

1.2.0

• Add oidc_user_claims filter [#82]