friloo
3e3e87b399
Adds a WordPress plugin that places a customisable "Sign in with Microsoft" button on wp-login.php and signs existing users in via the OpenID Connect authorization code flow with PKCE. Users are matched by e-mail address only; no accounts are created. Security: single-use state/nonce bound to an HttpOnly cookie, ID token signature verification against Microsoft's JWKS (RS256 only) with issuer/audience/tenant/expiry/nonce checks, optional tenant pinning, account binding to the Microsoft object ID, e-mail domain allow-list, client secret encrypted at rest (AES-256-GCM). Admin: settings screen with connection, button and security tabs, live button preview, colour presets, media-library icon picker, redirect URI copy button and tenant connectivity test. Packaging for WordPress.org: readme.txt with External services section, GPL-2.0 license, uninstall.php, POT + German translations, .distignore, build script, PHPCS config and CI running Plugin Check. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JJxAHYdMfKPoN4koRc4Ci2 |
||
|---|---|---|
| .. | ||
| icon.svg | ||
| README.md | ||
WordPress.org assets
Files in this folder are not shipped with the plugin. They are uploaded to the
assets/ directory of the WordPress.org SVN repository once the plugin is approved:
| File | Purpose | Size |
|---|---|---|
icon.svg |
Plugin icon (directory + plugin installer) | vector, or icon-128x128.png / icon-256x256.png |
banner-772x250.png |
Directory page header (not included yet) | 772×250 (+ banner-1544x500.png for HiDPI) |
screenshot-1.png … |
Screenshots referenced from readme.txt |
any, PNG/JPG |
Screenshot order must match the == Screenshots == section in readme.txt.