{"id":243378,"date":"2025-08-22T08:03:23","date_gmt":"2025-08-22T08:03:23","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/openid-connect-infomaniak\/"},"modified":"2026-08-19T08:32:21","modified_gmt":"2026-08-19T08:32:21","slug":"infomaniak-connect-openid","status":"closed","type":"plugin","link":"https:\/\/lt.wordpress.org\/plugins\/infomaniak-connect-openid\/","author":23333508,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.5","stable_tag":"1.0.5","tested":"6.8.8","requires":"5.0","requires_php":"8.0","requires_plugins":null,"header_name":"Infomaniak Connect for OpenID","header_author":"infomaniak","header_description":"Connect to Infomaniak OpenID provider using Authorization Code Flow.","assets_banners_color":"8088af","last_updated":"2026-08-19 08:32:21","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/github.com\/Infomaniak\/infomaniak-connect-openid","header_author_uri":"http:\/\/www.infomaniak.com","rating":0,"author_block_rating":0,"active_installs":30,"downloads":367,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["changelog","description"],"tags":{"1.0.2":{"tag":"1.0.2","author":"leopoldinfomaniak","date":"2025-08-22 08:24:30"},"1.0.4":{"tag":"1.0.4","author":"leopoldinfomaniak","date":"2026-08-06 13:14:03"},"1.0.5":{"tag":"1.0.5","author":"leopoldinfomaniak","date":"2026-08-19 08:32:21"}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon.svg":{"filename":"icon.svg","revision":3348496,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3348491,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3348491,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.2","1.0.4","1.0.5"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[63940,2061,6694],"plugin_category":[38],"plugin_contributors":[],"plugin_business_model":[],"class_list":["post-243378","plugin","type-plugin","status-closed","hentry","plugin_tags-infomaniak","plugin_tags-oauth","plugin_tags-openid","plugin_category-authentication","plugin_committers-leopoldinfomaniak"],"banners":[],"icons":{"svg":"https:\/\/ps.w.org\/infomaniak-connect-openid\/assets\/icon.svg?rev=3348496","icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/infomaniak-connect-openid_8088af.svg","icon_2x":false,"generated":true},"screenshots":[],"raw_content":"<!--section=changelog-->\n<h4>1.0.5<\/h4>\n\n<ul>\n<li>Security: Strip access and refresh tokens from user meta, storing id_token only<\/li>\n<li>Security: Prevent open redirect after OIDC authentication by using wp_safe_redirect<\/li>\n<li>Security: Sanitize $_GET input at the authentication entry point<\/li>\n<li>Fix: Address PR review findings for JWT and PKCE code<\/li>\n<li>Feat: Add PKCE and nonce support to the OIDC authentication flow<\/li>\n<li>Fix: Verify aggregated claim JWTs using JWKS<\/li>\n<li>Fix: Refuse empty endpoint_jwks configuration<\/li>\n<li>Docs: Update token-response meta docblock to reflect id_token-only storage<\/li>\n<\/ul>\n\n<h4>1.0.4<\/h4>\n\n<ul>\n<li>Security: Add JWT signature verification via JWKS endpoint<\/li>\n<li>Security: Validate ID token claims (expiration, audience, issuer, issued-at)<\/li>\n<li>Security: Fix open redirect vulnerability via redirect cookie<\/li>\n<li>Security: Restrict SSL verification bypass to local development environments only<\/li>\n<li>Security: Add SSRF protection using wp_safe_remote_post\/wp_safe_remote_get<\/li>\n<li>Security: Use cryptographically secure random_bytes for state generation<\/li>\n<li>Security: Sanitize IDP error codes and descriptions<\/li>\n<li>Security: Add esc_url_raw sanitization on authentication URL after filter<\/li>\n<li>Add JWKS endpoint and issuer configuration for Infomaniak IDP<\/li>\n<\/ul>\n\n<!--section=description-->\n<p>The Infomaniak Connect for OpenID plugin allows easy integration of OAuth2 authentication with Infomaniak into your WordPress site. With this plugin, users can log into your WordPress site using their Infomaniak credentials, which simplifies the authentication process and enhances security.<\/p>","raw_excerpt":"The Infomaniak Connect for OpenID plugin allows easy integration of OAuth2 authentication with Infomaniak into your WordPress site.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/lt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/243378","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/lt.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/lt.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=243378"}],"author":[{"embeddable":true,"href":"https:\/\/lt.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/leopoldinfomaniak"}],"wp:attachment":[{"href":"https:\/\/lt.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=243378"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/lt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=243378"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/lt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=243378"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/lt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=243378"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/lt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=243378"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/lt.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=243378"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}