Comments (8)
from openid-connect-php.
Hi Mike, it might?
MIcrosoft Azure has an openid-configuration url.
(https://login.microsoftonline.com/xxxx/.well-known/openid-configuration)
Do I need to pass that in specifically somewhere?
Also from my code above, I am trying to add the authorization_endpoint manually, but I still get the error - is there a different way to add the authorization_endpoint?
Thanks!
from openid-connect-php.
@jackfruh Your provider base might not be set correctly.
Change
$providerurl = 'https://login.microsoftonline.com/xxxxx/oauth2/authorize';
to something like this?
$providerurl = 'https://login.microsoftonline.com/xxxx/';
If this is correct then the lib will automatically pull in the .well-known
config. See https://github.com/jumbojett/OpenID-Connect-PHP/blob/master/src/OpenIDConnectClient.php#L361
from openid-connect-php.
Fantastic! I'm getting redirected to Microsoft now for authentication!
I'm running this on a local dev server without SSL, and it looks like microsoft azure is seeing an SSL reply address from somewhere:
AADSTS50011: The reply address 'https://azureadnocase.dev/' does not match the reply addresses configured for the application.
I've added the following lines to my code:
$oidc->setVerifyHost(false);
$oidc->setVerifyPeer(false);
but I still see that error from Microsoft.
Is there anywhere else I need to tell OpenIDConnectClient what the reply URL should be?
from openid-connect-php.
I configured my local dev environment with an SSL certificate and added the SSL reply address to the application configuration in Azure.
I'm now making it out to Azure AD for authentication, then back to my app!
Unfortunately I get some errors about JWT claims:
Fatal error: Uncaught Jumbojett\OpenIDConnectClientException: Unable to verify JWT claims in /Users/jack/Desktop/WebFiddle.test/AzureADNONCASESENSITIVE/vendor/jumbojett/openid-connect-php/src/OpenIDConnectClient.php on line 293
This raises a few questions:
- I start out on index.php and it looks like the redirect from Azure is also going to index.php - is that correct, or should there be a different page to handle the redirect back?
- the redirected code back from azure is to index.php/?code=xxx&state=yyy&session_state=zzz are these what you're looking for?
from openid-connect-php.
The reply address 'https://azureadnocase.dev/' does not match the reply addresses
@jackfruh This simply means you need to register the redirect URI (https://azureadnocase.dev/) with Azure. This is normally done when you first generate a clientID and secret. I'm guessing you can add it somewhere in Azure's admin panel.
from openid-connect-php.
Thanks Michael, I had it registered without the https but it still wasn't working, so I just put a certificate on my dev server (per comment above)
Any ideas on the JWT stuff?
from openid-connect-php.
Unable to verify JWT claims in
@jackfruh Set your debugger near the error message and find out what claims don't match. That's the best way to figure it out!
from openid-connect-php.
Related Issues (20)
- Bugs - Azure B2C - URL char issue HOT 2
- Issue when running composer require jumbojett/openid-connect-php HOT 1
- signout() does not sign me out of my application HOT 9
- requestClientCredentialsToken invalid scope in Keycloak HOT 2
- Throwed error if the server returns one is complete HOT 1
- OpenID Connect can return an id_token as part of the refresh_token grant type
- Keycloak 22.0 not supported? HOT 5
- Release new major ... HOT 1
- Cant get codeVerifier in redirectUri if we make authorization flow using PKCE HOT 1
- SERVER_PORT always causes port in redirect URL HOT 4
- Redirect doesn't remove state, session_state, and code params HOT 2
- Support dropped for phpseclib 2.*? HOT 2
- Invalid Client - Connect Token HOT 1
- Support for `id_token_signing_alg_values_supported` HOT 1
- Return types are too strict
- requestTokenExchange error Passing null to parameter #2 of http_build_query
- Debug Mode ? HOT 1
- scopes attribut are NULL HOT 1
- could you maybe help out the heimdall project to add oidc support?
- $verifiedClaims is no array but an object
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from openid-connect-php.