=== Dorvis Auth ===
Contributors: dorvis
Tags: authentication, oidc, openid connect, login, sso
Requires at least: 5.0
Tested up to: 7.1
Stable tag: 0.1.1
Requires PHP: 8.0
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html

Authentication with Dorvis OIDC service using Authorization Code Flow.

== Description ==

Dorvis Auth allows your WordPress users to log in using the Dorvis OIDC provider. It supports the Authorization Code Flow for secure authentication.

**Features:**
*   "Authenticate with Dorvis" button on the login form.
*   Automatic user creation based on Personal Code.
*   Maps First Name and Last Name from OIDC claims.
*   Configurable Client ID, Secret, Issuer URI and Redirect URI via Settings.

== Installation ==

1.  Upload the `dorvis_auth` folder to the `/wp-content/plugins/` directory.
2.  Activate the plugin through the 'Plugins' menu in WordPress.
3.  Go to **Settings > Dorvis Auth**.
4.  Enter your **Client ID** and **Client Secret**.
5.  Set the **Redirect URI** (must match your Dorvis OIDC configuration).
6.  Save changes.

== Frequently Asked Questions ==

= Where do I get my Client ID? =
You must contact Dorvis support or use the demo credentials provided in the documentation.

= What claims are mapped? =
The plugin maps `person_code` to the username, and `given_name`/`family_name` to the user's name fields.

== Privacy ==

[Dorvis Privacy and Cookie Policy](https://dorvis.eu/en/privacy)

== Changelog ==

= 0.1.0 =
*   Added PKCE, state and nonce protection to the authorization request.
*   Added callback handling with state verification.
*   Added ID token validation, discovery caching and logout.

= 0.0.2 =
*   Added settings page.
*   Improved user mapping logic.

= 0.0.1 =
*   Initial release.
