Soli Passport Plugin

Soli Passport Plugin OIDC client adapter for Soli WordPress sites. ~Current Version:0.1.0~ ~Plugin Name: wp-soli-passport-plugin~ Description Applies the authorization decisions made by the Soli identity provider (admin.soli.nl) to a WordPress site. The provider decides which role a user gets per application; this plugin puts that role on the local WordPress user, refuses the login when no role was granted, and stores the user's orchestra and instrument assignments for other Soli plugins to read. It is an adapter on top of the OpenID Connect Generic plugin, which handles the OIDC protocol itself. Features - Role sync: the roles claim from the provider becomes the local WordPress role - Access control: no granted role means the login is refused and no user is created - Assignments: the assignments claim is stored as user meta for other plugins - Member privacy: the public /wp/v2/users REST routes are hidden from anonymous requests, so synced member names cannot be enumerated - SSO bypass: wp-login.php?bypass-sso for local WordPress login - Error recovery: a failed SSO login offers a way to sign in as someone else instead of bouncing back into a redirect loop Requirement