Repository navigation
Security
- Bind the OpenID state and nonce to the browser that started the login, preventing login CSRF (forced authentication) and replay of a captured authorization response
- Validate the ID token nonce claim during login
Other
- Removed the unused bundled firebase/php-jwt library from the plugin package
- Repaired and expanded the unit test suite