WordPress Managed - Package updates

[Package Updates]

[3.15.0]

• openid-connect-generic plugin replaced with renamed daggerhart-openid-connect-generic plugin

[Package Updates]

[3.15.1]

• Update WordPress to 6.9.1
• Full Changelog

[Package Updates]

[3.15.2]

• Update openid-connect-generic to 3.10.3

[Package Updates]

[3.16.0]

• Update openid-connect-generic to 3.11.3
• Add configurable issuer setting for JWT validation by @​daggerhart in #​639
• Fix JWT verification with Microsoft Entra ID JWKS by @​daggerhart in #​636
• 629: Fix to better match issuer in jwt validator by @​daggerhart in #​630
• Previous versions decoded JWT tokens without cryptographic verification
• Added proper JWT signature verification using JWKS (JSON Web Key Set)
• Implements firebase/php-jwt library for validation
• Validates all required claims: exp, aud, iss, iat, sub
• Added signature verification for aggregated claims from secondary JWTs
• Prevents injection of forged claims
• Replaced unsafe HTTP functions with SSRF-protected alternatives