waldo2188/openidconnectrelyingpartybundle

OpenId Connect Relying Party Bundle for Symfony 2

openidconnectrelyingpartybundle's Issues

ServiceNotFoundException: dependency on a non-existent service "security.context".

Hi

I have created a brand new symfony (3.3.4) project and started to copy-paste from your installation guide.

everything was fine, until configuring the security.yml

Once done, I get the following error message :
The service "security.firewall.map.context.secured_area" has a dependency on a non-existent service "security.context".

in CheckExceptionOnInvalidReferenceBehaviorPass.php (line 31)

any idea ?

[sf2.3] ServiceNotFoundException

Hi,

Your bundle uses an non existent service in Symfony 2.3. The stack error looks like this:

[Symfony\Component\DependencyInjection\Exception\ServiceNotFoundException]                              
The service "waldo_oic_rp.logout" has a dependency on a non-existent service "security.token_storage".

It seems that "security.token_storage" service comes from the Symfony 2.6 security improvements. I think the require symfony version should be update to >= 2.6 in composer.json file.

JWK validation fails if "use" is not present in key

If the jwk returned from open id server contains no "use" property, signature validation fails with InvalidIdSignatureException.

Seems to be due to OICResponseHandler::verifySignedJwt():
$key = $jwkSet->filterJwk("use", \JOSE_JWK::JWK_USE_SIG);

That's the JWKSet I had:

JOSE_JWKSet Object
(
[keys] => Array
(
[0] => JOSE_JWK Object
(
[components] => Array
(
[alg] => RS256
[e] => AQAB
[n] => 23zs5 ... 1pB-CP0
[kty] => RSA
[kid] => rsa1
)
)
)
)

As far as I understand, the "use" part is optional.

Bundle registration is missing in install documentation

If we follow the install documentation, we get an error:
There is no extension able to load the configuration for "waldo_oic_rp"
because the bundle is not registered in AppKernel.

gree/jose

It needs "gree/jose": "0.2" in require