Infomaniak Connect for OpenID
| 开发者 | |
|---|---|
| 更新时间 | 2026年8月6日 21:14 |
| WordPress版本: | 6.8 |
| 版权: | GPLv2 or later |
详情介绍:
更新日志:
1.0.4
- Security: Add JWT signature verification via JWKS endpoint
- Security: Validate ID token claims (expiration, audience, issuer, issued-at)
- Security: Fix open redirect vulnerability via redirect cookie
- Security: Restrict SSL verification bypass to local development environments only
- Security: Add SSRF protection using wp_safe_remote_post/wp_safe_remote_get
- Security: Use cryptographically secure random_bytes for state generation
- Security: Sanitize IDP error codes and descriptions
- Security: Add esc_url_raw sanitization on authentication URL after filter
- Add JWKS endpoint and issuer configuration for Infomaniak IDP