Andras Bacsai c0d81d4c9c fix(auth): accept Entra ID xms_edov claim as verified OIDC email ...

Microsoft Entra ID never sends email_verified, so existing accounts could
not be linked through OIDC. Treat a boolean true xms_edov claim (email
domain owner verified) as equivalent, via a shared
OidcUser::claimsVerifyEmail() helper used for both ID token and userinfo
claims.

Document the Entra ID issuer URL and required optional claims in the
OIDC settings helper text, and add tests covering xms_edov handling.

2026-10-02 18:51:16 +02:00

..

Exceptions

Reapply "Merge branch 'next' into main"

2026-08-21 12:15:46 +02:00

Socialite

Reapply "Merge branch 'next' into main"

2026-08-21 12:15:46 +02:00

OidcConfig.php

Reapply "Merge branch 'next' into main"

2026-08-21 12:15:46 +02:00

OidcDiscoveryDocument.php

Reapply "Merge branch 'next' into main"

2026-08-21 12:15:46 +02:00

OidcDiscoveryService.php

Reapply "Merge branch 'next' into main"

2026-08-21 12:15:46 +02:00

OidcTokenValidator.php

Reapply "Merge branch 'next' into main"

2026-08-21 12:15:46 +02:00

OidcUser.php

fix(auth): accept Entra ID xms_edov claim as verified OIDC email

2026-10-02 18:51:16 +02:00