Multiple Enhancements, Entra V2 Endpoints, Cert based Auth, Photo Sync.

[clarm060]

Summary of changes
The plugin is now version 0.11.4 and remains branded and attributed to the original author, Philippe Signoret. Authentication improvements
Upgraded authentication to the Microsoft identity platform v2 endpoints. Added authorization-code flow with PKCE.
Added certificate-based client authentication using private_key_jwt. Retained client-secret authentication as an option. Certificate management
Administrators can generate a 3072-bit RSA self-signed certificate from the settings page. The generated public certificate automatically populates the certificate field. Certificate authentication is automatically selected after generation. Added a prominent button to download the public .cer file for uploading to the Entra app registration. The private key is never included in the download or displayed in the administration page. Fixed certificate generation, storage, download routing, settings sanitization, and PEM line-ending issues. Private-key security
The private key is encrypted before database storage using AES-256-CBC. Stored data is integrity-protected with HMAC-SHA-256. Encryption keys are derived from WordPress security keys or an optional dedicated AADSSO_PRIVATE_KEY_ENCRYPTION_KEY. Private-key passphrases are used only during import and are not stored. Profile-photo synchronization
Added Microsoft Graph profile-photo synchronization using /me/photo/$value.

Automatically imports a Microsoft photo during sign-in only when the user has no local photo.

Users can manually replace their photo with the latest Microsoft version from: Their standard WordPress profile.

Uses the existing delegated User.Read access token and does not store Graph tokens.

Existing imported photos continue to work after the old photo-sync plugin is deactivated.

Site-wide photo control
Added an administrator checkbox:
Enable Microsoft Graph profile photo sync
Turning it off:
Stops automatic photo imports.
Stops user-initiated refreshes.
Hides profile synchronization controls.
Does not delete or stop displaying previously imported photos. Compatibility and validation
Added support through PHP 8.5.

[clarm060]

note due to switching to V2 endpoints it does point to different fields in the database, so it will wipe what you have already in there. Im working on fixing that.

[clarm060]

Not in the original commit, but also added the ability to show photo using Ultimate member Membership Plugin natively. It is present in the readme file

[clarm060]

I think it's ready to go I tested on a few of my sites and everything seems good