Implement OpenID Connect Discovery - PHP 8

README.md

@@ -18,16 +18,24 @@ $signer   = new \Lcobucci\JWT\Signer\Rsa\Sha256();
 $provider = new \OpenIDConnectClient\OpenIDConnectProvider([
         'clientId'                => 'demoapp',
         'clientSecret'            => 'demopass',
-        // the issuer of the identity token (id_token) this will be compared with what is returned in the token.
-        'idTokenIssuer'           => 'brentertainment.com',
         // Your server
         'redirectUri'             => 'http://example.com/your-redirect-url/',
+
+        // Settings of the OP (OpenID provider)
+        // The issuer of the identity token (id_token) this will be compared with what is returned in the token.
+        'idTokenIssuer'           => 'brentertainment.com',
         'urlAuthorize'            => 'http://brentertainment.com/oauth2/lockdin/authorize',
         'urlAccessToken'          => 'http://brentertainment.com/oauth2/lockdin/token',
         'urlResourceOwnerDetails' => 'http://brentertainment.com/oauth2/lockdin/resource',
         // Find the public key here: https://github.com/bshaffer/oauth2-demo-php/blob/master/data/pubkey.pem
         // to test against brentertainment.com
-        'publicKey'                 => 'file:///myproj/data/public.key',
+        'publicKey'               => 'file:///myproj/data/public.key',
+
+        // Alternatively, you can use automatic discovery as long as your server
+        // has the <issuer>/.well-known/openid-configuration endpoint.
+        // This endpoint will then provide all provider settings above, so you only need to provide
+        // your own clientId, clientSecret, and redirectUri.
+        'issuer'                  => 'http://example.com/oauth2'
     ],
     [
         'signer' => $signer

composer.json

@@ -10,11 +10,13 @@
     ],
     "require": {
         "php": ">= 7.4",
+        "codercat/jwk-to-pem": "^1.1",
         "lcobucci/jwt": "~4.0",
         "league/oauth2-client": "^2.0",
         "webmozart/assert": "^1.10"
     },
     "require-dev": {
+        "ext-json": "*",
         "dg/bypass-finals": "^1.3",
         "enlightn/security-checker": "^1.9",
         "ergebnis/composer-normalize": "^2.15",