OAuth2/oauth2-server-php.git/src, branch v0.7 A library for implementing an OAuth2 Server in php (mirror) https://git.radix-linux.su/OAuth2/oauth2-server-php.git/atom?h=v0.7 2013-04-29T17:59:12+00:00 Update Server.php 2013-04-29T17:59:12+00:00 Brent Shaffer bshafs@gmail.com 2013-04-29T17:59:12+00:00 urn:sha1:bd4440b60a996f18f12c747de39f180c7c5f0400 **BC-BREAKING CHANGE** - addresses #108 - removes default jwt granting, as "audience" is required. This needs to be set using `addGrantType` instead. Merge pull request #112 from rjmackay/develop 2013-04-29T16:46:04+00:00 Brent Shaffer bshafs@gmail.com 2013-04-29T16:46:04+00:00 urn:sha1:9d097b49c2d4588ac79f430ef2ed9a778ffa400f **BC-BREAKING CHANGE** - moves `checkRestrictedGrantType` from `ClientCredentialsInterface` to `ClientCredentialsInterface`. See #111 and #112 Merge pull request #109 from bojanz/unbounded_scopes 2013-04-29T16:37:15+00:00 Brent Shaffer bshafs@gmail.com 2013-04-29T16:37:15+00:00 urn:sha1:ef2814cdecb49d0950d75abd9877e672c5cc3b0e Better support for unbounded scopes. Fix undefined index 'client_id' errors in OAuth2_Server_Authorize_* Tests 2013-04-29T02:38:53+00:00 Robbie Mackay rm@robbiemackay.com 2013-04-29T02:38:53+00:00 urn:sha1:642c5cd4ee68986b4d814d60e8ddb09b461467a4 Move checkRestrictedGrantType() to ClientInterface 2013-04-29T02:08:05+00:00 Robbie Mackay rm@robbiemackay.com 2013-04-29T02:08:05+00:00 urn:sha1:3dd3b253ff147425ab14e057c76d283f02e882b2 Make more sense to have checkRestrictedGrantType in ClientInterface instead of ClientCredentialsInterface as its not really anything to do with 'credentials'. Revert AuthorizeController $clientStorage parameter to ClientInterface Check client's allowed grant types for authorize requests #111 2013-04-29T00:27:54+00:00 Robbie Mackay rm@robbiemackay.com 2013-04-29T00:27:54+00:00 urn:sha1:d0427240f3b1a9d2c0441a11ee087734a1a96985 Add checks for restricted grant type to Authorize Controller. Means that clients need 'implicit' grant type to use implicit flow, and clients that can't use auth code flow get bumped on the authorization step not the token step. Better support for unbounded scopes. 2013-04-28T20:54:01+00:00 Bojan Zivanovic bojanz@gmail.com 2013-04-28T14:25:26+00:00 urn:sha1:953e499ad35af780a3dc794e57cdab5b38abafb3 Change Statuscode 400 to 405 if POST-Request is required 2013-04-28T18:54:23+00:00 steffkes matheis.stefan@googlemail.com 2013-04-28T18:54:23+00:00 urn:sha1:dff23e376e702eb77c5deace38aa18c624bb32a6 As per http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.6 change the statuscode from 400 to 405 and include `Allow`-header indicating that POST must be used to grant an access token. Update Pdo.php 2013-04-24T14:11:25+00:00 Brent Shaffer bshafs@gmail.com 2013-04-24T14:11:25+00:00 urn:sha1:3ea2f339996c41afbda5c43eb1bd99a7189939b2 fixed #106 fixes #86 - makes http basic authentication POST check optional and removes GET check 2013-04-20T13:57:39+00:00 Brent Shaffer bshafs@gmail.com 2013-04-20T13:57:39+00:00 urn:sha1:9b7a57444ddc2982c9b6a2dbeef5824c810f22c5