Update openid-connect-php to 1.4.0, set OIDC_CODE_CHALLENGE_METHOD to S256 by default

Author: ondj

bin/misp_create_configs.py

@@ -171,8 +171,8 @@ def parse_mysql_settings(variable_name: str, value: str) -> dict:
     "OIDC_CLIENT_ID_INNER": Option(),
     "OIDC_CLIENT_SECRET": Option(sensitive=True),
     "OIDC_CLIENT_SECRET_INNER": Option(sensitive=True),
-    "OIDC_CODE_CHALLENGE_METHOD": Option(validation=check_oidc_code_challenge),
-    "OIDC_CODE_CHALLENGE_METHOD_INNER": Option(validation=check_oidc_code_challenge),
+    "OIDC_CODE_CHALLENGE_METHOD": Option(default="S256", validation=check_oidc_code_challenge),
+    "OIDC_CODE_CHALLENGE_METHOD_INNER": Option(default="S256", validation=check_oidc_code_challenge),
     "OIDC_AUTHENTICATION_METHOD": Option(default="client_secret_basic"),
     "OIDC_AUTHENTICATION_METHOD_INNER": Option(),
     "OIDC_CLIENT_CRYPTO_PASS": Option(sensitive=True),

bin/misp_install.sh

@@ -70,7 +70,7 @@ pip3.12 install scripts/mixbox scripts/misp-stix scripts/python-maec scripts/pyt
 cd /var/www/MISP/app/
 # Remove unused packages
 su-exec apache php composer.phar --no-cache remove --update-no-dev iglocska/cake-resque
-su-exec apache php composer.phar --no-cache require --update-no-dev sentry/sdk jakub-onderka/openid-connect-php:1.3.0 aws/aws-sdk-php
+su-exec apache php composer.phar --no-cache require --update-no-dev sentry/sdk jakub-onderka/openid-connect-php:1.4.0 aws/aws-sdk-php
 
 # Create attachments folder and set correct owner
 mkdir /var/www/MISP/app/attachments