bshaffer / oauth2-server-php

A library for implementing an OAuth2 Server in php
http://bshaffer.github.io/oauth2-server-php-docs
MIT License
3.26k stars 950 forks source link

Random failure at validating the id_token signature in RP #929

Open noeldieschburg opened 6 years ago

noeldieschburg commented 6 years ago

Hello,

First of all, I have to say that this is a very good job. I use this lib to implements an openid connect server and it works pretty well.

I use PDO storage in MySQL.

One problem I had is that signature of id_token (token end point in openidc mode) failed randomly in my rp.

After investigating it appears that the id_token field is a varchar(1000) in the src/OAuth2/Storage/Pdo.php file. 1000 is too small because it can be bigger. I put 2000 and now I don't have problem anymore. It would then be great to update de pfo.php ....

Thanks again for this excellent lib.

Noel