An empty (but valid formed) groups list provided via the OIDC ID token would be considered as a lacking detail, and therefore trigger a lookup to the userinfo endpoint in an attempt to get that information. This fixes this to properly distinguish between not-provided and empty state, to avoid userinfo where provided as valid but empty. Includes test to cover. For #5101 |
||
|---|---|---|
| .. | ||
| OidcAccessToken.php | ||
| OidcException.php | ||
| OidcIdToken.php | ||
| OidcInvalidKeyException.php | ||
| OidcInvalidTokenException.php | ||
| OidcIssuerDiscoveryException.php | ||
| OidcJwtSigningKey.php | ||
| OidcJwtWithClaims.php | ||
| OidcOAuthProvider.php | ||
| OidcProviderSettings.php | ||
| OidcService.php | ||
| OidcUserDetails.php | ||
| OidcUserinfoResponse.php | ||
| ProvidesClaims.php | ||