add support for login restrictions on a role or attribute basis

[badgerhill]

It would be great if i could e.g. specify a role or an attribute on the settings page. (e.g. required role)

If the userinfo does not have that specified role / attribute a login is not permitted.

This could be added in validate_user_claim() around line 550.

if ($user_claim['roles'] != 'MYCONFIG_SETTING') {  
   return new WP_Error( 'unauthorized', __( 'Unauthorized access. Wrong role/attribute', 'daggerhart-openid-connect-generic' ), $login_user );
}