alancting / php-microsoft-jwt Goto Github PK
View Code? Open in Web Editor NEWThis project forked from firebase/php-jwt
PHP package for JWT
License: BSD 3-Clause "New" or "Revised" License
This project forked from firebase/php-jwt
PHP package for JWT
License: BSD 3-Clause "New" or "Revised" License
Hi!
I'm a bit confused by Microsoft's offering. I'm using Firebase/JWT right now to attempt to get a token to use with Microsoft Graph API's (I have the secret key working, but am attempting to use certificate based auth instead).
Is this library suitable for that use case instead, or is it for something else?
Currently with the Firebase/JWT, I'm working through errors of it not thinking I have the correct Key being used (different/wrong thumbprint).
Hello,
This version seem to be not updated since 2021. So i suppose we can't upgrade symfony to version 6 with this library ?
Because i can see in composer.json from php-microsoft-jwt this following code:
"require": {
"php": ">=7.1.3",
"symfony/cache": "^4.4 || ^5.0"
}
In the MicrosftConfiguration.php file on line 271 you need the command curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
Or enable passing the parameter to the path where the .pem certificate is installed for validation.
In the same file, lines 241 and 242 are validating whether the fields "userinfo_endpoint" and "device_authorization_endpoint" are available, but my Azure B2C application does not have these fields filled in. The ideal would be to pass the fields to be validated as a parameter, or validate only the essential ones.
The below message occurs when call AzureAdConfiguration
file_get_contents(): SSL operation failed with c
ode 1. OpenSSL Error messages:\nerror:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
Suggest to add logic by using cURL library for connecting remote site.
Hi,
thanks for this package. However a thing is missing. I am unable to validate multitenant application.
It would be great if we can configure multiple tenant in the configuration to validate issuer.
You can have a look to the followings links :
The simplest way should be to let the user to override the _validateIssuer function
Best regards
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.