Check for sub if user_id is not present

[elliot-sawyer]

Fixes #24

[neeckeloo]

It seems that the user_id attribute is no longer present in the payload of the /userinfo endpoint.

https://auth0.com/docs/api/authentication#user-profile

IMO, you can replace the user_id attribute by sub and update the payload in the following test:

https://github.com/RiskioFr/oauth2-auth0/blob/master/tests/Auth0ResourceOwnerTest.php

[elliot-sawyer]

I believe user_id is still present if you've logged in through one of the social plugins on the auth0 side, and may also be impacted by the requested scope. I left the user_id check in there for a couple reasons, namely

• to avoid breaking applications where this is working (I can't be the first person to spot this, surely)
• to avoid breaking existing tests
• I don't understand everybody's use case

Re: the test, it appears to be taken directly from the oauth2-google plugin and doesn't appear relevant to the auth0 response? I would love to fix it but don't have a lot of experience with mock responses, some assistance would be appreciated. Thanks!

[elliot-sawyer]

Just adding, I ran a test against a social login (Google) and it came back with the "sub" parameter instead of user_id. I've captured the response that came back, so I can use that to update the test.