Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improved OIDC Compliance #92

Merged
merged 2 commits into from
Mar 3, 2020
Merged

Conversation

davidpatrick
Copy link
Contributor

@davidpatrick davidpatrick commented Feb 21, 2020

Changes

  • Adds proper error handling in the callback phase
  • Improves OIDC Compliance with ID Token Validation
  • Fixes issue with JWTValidator decode returning an array, and not the expected hash

Tests

  • Tests cover all scenarios of id token validation

@davidpatrick davidpatrick requested a review from a team February 21, 2020 17:08
@davidpatrick davidpatrick force-pushed the oidc_compliance branch 3 times, most recently from a1d7e7b to b0bfa69 Compare February 21, 2020 23:30
@adamjmcgrath adamjmcgrath requested review from adamjmcgrath and removed request for a team February 25, 2020 10:58
adamjmcgrath
adamjmcgrath previously approved these changes Feb 27, 2020
@davidpatrick davidpatrick requested review from lbalmaceda and jimmyjames and removed request for lbalmaceda February 27, 2020 19:50
Copy link
Contributor

@jimmyjames jimmyjames left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Few minor suggestions and questions.

lib/omniauth/auth0/jwt_validator.rb Outdated Show resolved Hide resolved
lib/omniauth/auth0/jwt_validator.rb Show resolved Hide resolved
spec/omniauth/auth0/jwt_validator_spec.rb Outdated Show resolved Hide resolved
lib/omniauth/strategies/auth0.rb Show resolved Hide resolved
jimmyjames
jimmyjames previously approved these changes Feb 29, 2020
@lbalmaceda lbalmaceda closed this Mar 2, 2020
@lbalmaceda lbalmaceda reopened this Mar 2, 2020
@lbalmaceda
Copy link
Contributor

@davidpatrick ready for you

@davidpatrick davidpatrick merged commit 3c7b8cd into auth0:master Mar 3, 2020
@davidpatrick davidpatrick added this to the 2.3.0 milestone Mar 6, 2020
@davidpatrick davidpatrick mentioned this pull request Mar 6, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants