From bff06016b6fce5ac215e2f6a9ef2da1ff1991829 Mon Sep 17 00:00:00 2001
From: aegypius <innercircle@aegypius.com>
Date: Fri, 26 May 2023 12:00:24 +0200
Subject: [PATCH] [SecurityBundle] add missing xsd definition for OIDC

---
 .../Resources/config/schema/security-1.0.xsd  | 32 +++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/src/Symfony/Bundle/SecurityBundle/Resources/config/schema/security-1.0.xsd b/src/Symfony/Bundle/SecurityBundle/Resources/config/schema/security-1.0.xsd
index 23fe45e243fbf..2f08fcadfea1c 100644
--- a/src/Symfony/Bundle/SecurityBundle/Resources/config/schema/security-1.0.xsd
+++ b/src/Symfony/Bundle/SecurityBundle/Resources/config/schema/security-1.0.xsd
@@ -309,6 +309,7 @@
     <xsd:complexType name="access_token">
         <xsd:choice minOccurs="0" maxOccurs="unbounded">
             <xsd:element name="token-extractor" type="xsd:string" />
+            <xsd:element name="token-handler" type="oidc_token_handler" />
         </xsd:choice>
         <xsd:attribute name="token-handler" type="xsd:string" />
         <xsd:attribute name="realm" type="xsd:string" />
@@ -317,6 +318,37 @@
         <xsd:attribute name="provider" type="xsd:string" />
     </xsd:complexType>
 
+    <xsd:complexType name="oidc_token_handler">
+        <xsd:sequence>
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="oidc-user-info" type="oidc_user_info"></xsd:element>
+                <xsd:element name="oidc" type="oidc"></xsd:element>
+            </xsd:choice>
+        </xsd:sequence>
+        <xsd:attribute name="oidc-user-info" type="xsd:anyURI"></xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="oidc_user_info">
+        <xsd:attribute name="base-uri" type="xsd:anyURI" use="required" />
+        <xsd:attribute name="claim" type="xsd:string" />
+        <xsd:attribute name="client" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oidc">
+        <xsd:sequence>
+            <xsd:choice minOccurs="1" maxOccurs="1">
+                <xsd:element name="signature" type="oidc_signature" />
+            </xsd:choice>
+        </xsd:sequence>
+        <xsd:attribute name="claim" type="xsd:string" />
+        <xsd:attribute name="audience" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oidc_signature">
+        <xsd:attribute name="algorithm" type="xsd:string" use="required" />
+        <xsd:attribute name="key" type="xsd:string" use="required" />
+    </xsd:complexType>
+
     <xsd:complexType name="login_throttling">
         <xsd:attribute name="limiter" type="xsd:string" />
         <xsd:attribute name="max-attempts" type="xsd:integer" />