LenientOidcDiscoveryMetadataPolicy implements OidcDiscoveryMetadataPolicyInterface
FinalYes
Lenient metadata policy for identity providers that omit code_challenge_methods_supported from their OIDC discovery response despite supporting PKCE (e.g. FusionAuth, Microsoft Entra ID).
If code_challenge_methods_supported is present, it is still validated. If absent, the downstream OAuthProxyMiddleware defaults to ['S256'].
Tags
Table of Contents
Interfaces
- OidcDiscoveryMetadataPolicyInterface
- Validation policy for OIDC discovery metadata.
Methods
- isValid() : bool
Methods
isValid()
public
isValid(mixed $metadata) : bool
Parameters
- $metadata : mixed