kdoyen/openid-connect-php

Minimalist OpenID Connect client (PHP5.4+)

openid-connect-php's Issues

error in line 783

Shouldn't it be
$public_key_xml = sprintf($public_key_xml, Utils::b64url2b64($key->n), Utils::b64url2b64($key->e));
?

openid scope is not sent by default - or at least it should be documented to add it

Hello

I am testing this library with keycloak and I got an issue as the code was failing with the exception
User did not authorize openid scope.
and this is because the keycloak server was not sending the id_token.

According to openid specs, chapter 3.1.2.1:
"scope
REQUIRED. OpenID Connect requests MUST contain the openid scope value. If the openid scope value is not present, the behavior is entirely unspecified."

adding the scope openid made it works.
As it is specified that this scope must be present, I'm wondering if it's not better to hardcode it in the authencation request.
Or at least document it.

Best

kikkauz