Use the same issuer in token and discovery responses

jeremy379 / laravel-openid-connect

Implement OpenID Connect inside Laravel

MIT License

26 stars 13 forks source link

Use the same issuer in token and discovery responses #24

Open alecpl opened 2 months ago

alecpl commented 2 months ago

OIDC clients compare discovered issuer with token's issuer. So, these must be the same.

Mentioned in #23.

alecpl commented 2 months ago

I see that there are no tests for Laravel stuff including DiscoveryController. It means that some tests fail because can't use url() without Laravel. I'm not sure what to do with that.

alecpl commented 2 months ago

I added forcing of https:// in Discovery. So, it fixes #23. The issuer is simplified/unified to 'https://' . $_SERVER['HTTP_HOST'] in both places.