Skip to content

Version 1.2.3

Choose a tag to compare

View all tags
@eliKeetch eliKeetch released this 21 Sep 17:25
· 6 commits to main since this release
v1.2.3
468e507

Access Platform SSO v1.2.3

Restored Access Admin Propagation

  • Restores automatic promotion of Access administrators to WordPress administrators.
  • Applies to both newly created and existing WordPress users upon their next Access SSO login.
  • Supports the Access admin claims is_admin, access_role, and role.
  • Does not downgrade or replace roles for non-admin users.

Security

Administrator promotion is accepted only from a fully validated, site-specific, single-use JWT. Validation includes:

  • JWT signature
  • Expiration and issued-at timestamps
  • Trusted issuer and audience
  • Exact canonical Access site ID
  • Replay protection
Assets 2
Loading