openid

Asking about this since the NSA recently published guidance advising the public and private sectors to transition to cryptographic algorithms that are no less than sha384 & ec384 (elliptic curves).

While Edwards' Curves are different, its worth noting that prior to this update sha256 & secp256k1 were both on the list of acceptable cryptographic algorithms. My deduction was that 128-bit securit

Describe the bug
If the environment (in my case the stage environment) is not setup as a a secure origin the library break up cause of the crypto library is not in window object

To Reproduce
Steps to reproduce the behavior:

1. A server work on http that is setup as 'insecure origin'
2. Start the login sequence

Expected behavior
Warning on library loading that check secure or

Problem Description;
There are 2 filters that have gone undocumented since their inclusion in the code.

openid-connect-modify-token-response-before-validation
https://github.com/oidc-wp/openid-connect-generic/blob/7560701348e004f09df7c831d0703e0bcc173ca2/includes/openid-connect-generic-client-wrapper.php#L365

openid-connect-modify-id-token-claim-before-validation
https://github.com