Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

token request host header should include port number #538

Open
stormrider550 opened this issue May 8, 2024 · 0 comments
Open

token request host header should include port number #538

stormrider550 opened this issue May 8, 2024 · 0 comments
Labels

Comments

@stormrider550
Copy link

The token request host header should include the port number in the same way it is handled on the userinfo request. This is causing token validation to fail on my auth server when running on a non-standard port because the host without the port is not in my list of valid issuers.

add the following to request_authentication_token() just like is done in request_userinfo()

if ( ! empty( $parsed_url['port'] ) ) {
$host .= ":{$parsed_url['port']}";
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant