Flarum OpenID Connect Client

witech

Hi, will this work with WHMCS client portal?

maicol07

witech hi, yes. WHCMS is an OpenID Connect provider. You can check how to retrieve credentials here: https://docs.whmcs.com/OpenID_Connect#Setting_Up
And the autodiscovery endpoint here: https://docs.whmcs.com/OpenID_Connect_Developer_Guide#Authorization_Endpoint

For any other questions, just ask me!

witech

maicol07 I tried to install the plugin and told me api limit reached.

maicol07

witech which app gives the error? Composer or Flarum?

witech

Composer via cli
GitHub API limit (0 calls/hr) is exhausted, could not fetch https://api.github.com/repos/maicol07/OpenID-Connect-PHP/tags?per_page=100. Create a GitHub OAuth token to go over the API rate limit. You can also wait until ? for the rate limit to reset.

maicol07

witech another error here is a missing GitHub token: https://getcomposer.org/doc/articles/authentication-for-private-packages.md#github-oauth

maicol07

witech have you read this from the first post?

maicol07 This is a Premium extension, not a free one. You can buy a license to use it in your Flarum through Extiverse

witech

maicol07 okay my team opted out of using oauth for flarum.

maicol07

Release 1.0.2 (2021-09-27)

fix: 🐛 Fixed exception when not inserting provider URL
The issue was caused by a check via autodiscovery about PKCE methods

maicol07

Release 2.0 (2021-10-18)

The internal OpenID Connect Client, which you can find here, has got a major refactor. Due to this big change, the minimum PHP version has been bumped to PHP 8.0
- This will improve the overall performance of the extensions, powered by new PHP 8 features!

Note: Adding a custom repo is no more required! You can delete it using this command:

composer config --unset repositories.openid-connect

Wolfereign

It's nice to see a standardized SSO option but also unfortunate that to get proper SSO requires a paid extension. Anyways nice work.

maicol07

Wolfereign thank you! The explanation for this to be a premium extension is in the OP or in the Docs (section "Why premium?")

maicol07

Release 2.0.1 (2022-12-12)

fix: 🐛 Fix avatars sync when picture isn't provided
perf: Optimized code

Hotfix 2.0.2 (2022-12-13)

fix: Fix settings not working

rubensflinco

I can not buy, error:

maicol07

rubensflinco for issue about Extiverse I'll tag @luceos so he can look into it

maicol07

luceos ok, I already know why (and I suspect why)

rubensflinco let me fix this and wait Stripe review (some days, I think). I'll write here when it becomes available again

maicol07

rubensflinco Stripe has reviewed my account and is enabled again! Let me know if you have any other issue!

luceos

maicol07 according to the error your account is under review. There's nothing I can do to fix this, you should check the Stripe dashboard and their emails for more information.

maicol07

Release 3.0 (More settings, JWKS support, PHP 8.1 and improved stability!)

Highlights

JWKS endpoint support!

The long-awaited JWKS endpoint support is here! You're not forced anymore to use HMAC signature, but you have a full choice of algorithms, from RSA to EdDSA!

Improved autodiscovery

Autodiscovery has been improved and now it auto fetches more fields! You can override them too if you want!

PHP 8.1+ required (minimum version to run the extension)!

To support the newest extension and PHP features, PHP minimum requirement has been bumped to 8.1

More settings!

You can customize more of the extension, and almost fully customize the internal OIDC client!

A lot of fixes

Fixes have been made to all the issues found. If you find one, please add it to the bug tracker

Tested providers table

Check the docs below to check the tested providers matrix!

Check the updated docs for more!

Full Changelog

Major changes are marked with ❗️

✨ Features

b0dcf6c ✨ Disable logout switch if SSO mode isn't enabled
8760f75 ✨ Added email_verified claim skip verification
f48608d ✨ ❗️Added new SettingsPage
2591623 ✨ ⬆️ ❗️Upgraded to OIDC client v3
Highlights:
- ❗️ Replaced lcobucci/jwt with web-token/jwt-* (JWKS support!)
- ❗️Enhanced autodiscovery and JWT validation (should be more resilient now)
- PHP mbstring extension is required for JWT operations
- PHP 8.1 enums are used for some configuration properties

⚡ Performance Improvements

6208ef6 ⚡ Removed other save calls
bccc86b ⚡ Performance improvements

🐛 Bug Fixes

24951c3 Fix autodiscovery request
be2f738 Raised missing registered event
91a67a1 joined_at field unfilled
6396480 joined_at field unfilled
3daf94e Exception when nickname extension is not enabled
d0de966 🐛 Exception when the login button is clicked and the "Remove signup button" option is enabled
b6bac18 🐛 Fixed a rare bug when logging in

An exception was thrown if the user followed this steps:
- Settings -> Connect to OIDC
- Logout
- Login
d9f0962 Restore missing provider name setting
245ddb7 Enforce correct types via casting
27c0b15 Fix default settings not working
3b34245 Enable buttons only when connected to OIDC provider
b93f683 🐛 Manage account button not working on normal click
b17b439 🐛 Remove change email and password buttons

♻ Code Refactoring

384f4fe ♻️ Use constructor properties

📝 Docs changes

889e55a 📝 Updated README
6710672 📝 Updated docs link

👷 Building scripts changes

b43e965 📦 Updated compiled files
3f30e75 Added builded files

👷 CI changes

1bbd69d Added changelog generator
dd18780 💚 Fix failing workflow

Other changes

135822d 🌐 Updated translation
b43766a deps: ⏪ Reverted to Typescript 4
6044432 deps: ⬆️ Upgraded and cleaned dependencies

Release 3.0.1

fix: Avatar uploading from user profile isn't disabled when syncing avatars