jumbojett / OpenID-Connect-PHP

Minimalist OpenID Connect client

Home Page:https://github.com/jumbojett/OpenID-Connect-PHP

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Custom param

phpSimplex opened this issue · comments

Is there a possibility to add a custom param that will be send back when redirecting?
I tried in setRedirectUrl("url/.com/login?customCode=XXX") but that didnt work and got me the error 'Invalid Redirect Uri'

This is not possible within the openid specification. What you could do is set a value in the session.

Well the problem is that the session changes when the redirect happen so i have a different session_id.
The idea was to send the session_id within the redirect uri to reset the session with the old id

if the session id changes this reads more like an issue in your same site cookie setup - refs https://web.dev/samesite-cookies-explained/