diff options
| author | Brent Shaffer <bshafs@gmail.com> | 2013-04-06 01:13:51 +0400 |
|---|---|---|
| committer | Brent Shaffer <bshafs@gmail.com> | 2013-04-06 01:13:51 +0400 |
| commit | 728b183a024eb804b6d02bb43328bc62fcb99063 (patch) | |
| tree | 6b4fbe559969c9da1369670547cbb43b1ce246fd /src | |
| parent | cdd45f28923f6b42aa5e73c8c33eb9113f33f0b3 (diff) | |
| parent | c009b782d271a416f61f48fa2c1a9174ade2a67b (diff) | |
| download | oauth2-server-php-728b183a024eb804b6d02bb43328bc62fcb99063.tar.xz | |
Merge pull request #89 from bojanz/fix-config-references
Fix incorrect references to config variables.
Diffstat (limited to 'src')
| -rw-r--r-- | src/OAuth2/Server.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/OAuth2/Server.php b/src/OAuth2/Server.php index 3ef171a..7e98c47 100644 --- a/src/OAuth2/Server.php +++ b/src/OAuth2/Server.php @@ -299,9 +299,9 @@ class OAuth2_Server implements OAuth2_Controller_ResourceControllerInterface, /** * Pull the authorization request data out of the HTTP request. * - The redirect_uri is OPTIONAL as per draft 20. But your implementation can enforce it - * by setting CONFIG_ENFORCE_INPUT_REDIRECT to true. + * by setting $config['enforce_redirect'] to true. * - The state is OPTIONAL but recommended to enforce CSRF. Draft 21 states, however, that - * CSRF protection is MANDATORY. You can enforce this by setting the CONFIG_ENFORCE_STATE to true. + * CSRF protection is MANDATORY. You can enforce this by setting the $config['enforce_state'] to true. * * The draft specifies that the parameters should be retrieved from GET, override the Response * object to change this |