OpenID Connect extends OAuth2 for additional validation for authentication operations. The main extension is the id_token, which allows verification that the access token was issued by the Oauth2/OpenID Connect provider for the given client/consumer site.

Since this module allows for user authentication, the OpenID Connect extension is preferable. This module should add at least basic support for validating the id_token.

CommentFileSizeAuthor
#1 oauthconnector-2374353-1-id_token_validation.patch2.29 KBarithmetric
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

arithmetric’s picture

arithmetric CreditAttribution: arithmetric commented
FileSize
oauthconnector-2374353-1-id_token_validation.patch2.29 KB

Attaching patch to implement basic validation.

Requires the php-jwt library: https://github.com/firebase/php-jwt