diff --git a/api/src/Authentication/Type/OIDC.php b/api/src/Authentication/Type/OIDC.php index ecda25e9c..ff538d58d 100644 --- a/api/src/Authentication/Type/OIDC.php +++ b/api/src/Authentication/Type/OIDC.php @@ -44,9 +44,9 @@ private function getUser($token) global $sso_user_key; $ch = curl_init(); - curl_setopt($ch, CURLOPT_URL, $this->getProviderConfig()->userinfo_endpoint); - curl_setopt($ch, CURLOPT_HEADER, 0); - curl_setopt($ch, CURLOPT_HTTPHEADER, array('Authorization: Bearer ' . $token)); + curl_setopt($ch, CURLOPT_URL, $this->getProviderConfig()->introspection_endpoint); + curl_setopt($ch, CURLOPT_POSTFIELDS, array('token' => $token)); + curl_setopt($ch, CURLOPT_HTTPHEADER, array('Authorization: Basic ' . $this->getProviderConfig()->b64ClientCreds)); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); $response = curl_exec($ch); curl_close($ch);