search

steverhoades / oauth2-openid-connect-server

An OpenID Connect Server plugin for The PHP League's OAuth2 Server
MIT License
198 stars 41 forks source link

changed 'http' to 'https' for the id_token setIssuer function #22

Closed daserzw closed 5 years ago

daserzw commented 5 years ago

According to OIDC core the value of iss is an https URL, not http [1].

(discovered trying to figure out why the server is on https and the issuer in the id_token was http...)

Davide

[1] https://openid.net/specs/openid-connect-core-1_0.html#IDToken

daserzw commented 5 years ago

BTW, I forgot to say that phpunit reports OK on all the tests.