-
Notifications
You must be signed in to change notification settings - Fork 368
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
working with openAM #11
Conversation
$headers = array_merge($headers, $extra_headers); | ||
|
||
if( sizeof($headers)>0 ) | ||
file_put_contents($log_file,"Extra headers: ". serialize($headers)."\n",FILE_APPEND); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Bad idea to log extra headers that might contain access tokens and the like, isn't it?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Agree.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ah that is debug code, crept into here.
debugging code got into prod
finally got it working with OpenAM's oauth2 openid connect implementation. I believe this is also openID connect compliant. Fixed some inconsistencies from the document this implementation had. Also, the token request phase was behaving badly, made a quick fix not very clean though. Would be useful if you find a better fix.