summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2015-04-15Merge pull request #514 from nsams/patch-2php5.2-developBrent Shaffer1-1/+1
[php5.2] Make validateRedirectUri protected to be able to override
2015-02-09[php5.2] Make validateRedirectUri protected to be able to overrideNiko Sams1-1/+1
Like #512 for develop branch. This change is aginst php5.2-develop. I'm not sure if this branch is still active, nevertheless I have to use it on our SLES 10 Server with Php 5.2.
2013-06-13addresses #156 - documents required user_id for authcodesBrent Shaffer1-0/+1
2013-06-13addresses #157 for php5.2Brent Shaffer1-2/+2
2013-06-11fixes #154 - adds getParameter to OAuth2_ResponseInterfaceBrent Shaffer1-0/+2
2013-06-11fixes tests for e367a02d6ccb0abfd886eefffc88f98e5c8812a8Brent Shaffer1-3/+3
2013-06-11ensures invalid_token is returned according to ↵Brent Shaffer1-3/+3
http://tools.ietf.org/html/rfc6750#section-3.1
2013-06-08Merge branch 'develop'v0.9Brent Shaffer1-1/+1
2013-06-08upgrades tagged version in READMEBrent Shaffer1-1/+1
2013-06-08Merge branch 'develop'Brent Shaffer30-465/+772
2013-06-06Merge remote-tracking branch 'origin/develop' into developBrent Shaffer1-5/+15
2013-06-06Merge pull request #149 from CameronK/developBrent Shaffer1-5/+15
Update database schema to include unique keys
2013-06-06Updated to include schema tested w/ major DBMS'sCameron Kelley1-6/+14
Separated the schema into two sections - after reading up on some documentation I discovered that MySQL + SQLite accept both their own CONSTRAINT syntax as well as that of Postgre and MS SQL. However Oracle continues to be stubborn and only accept VARCHAR2 types. It also doesn't recognize the "text" type - because of this, I've converted all text fields to VARCHAR/VARCHAR2 fields with a default length of 255 chars (apart from password, which is set to 2000 to accommodate hashing algorithms).
2013-06-05Modified schema to support both MySQL and SQLiteCameron Kelley1-5/+7
Also added another header field for DBMS's which the schema has been tested with.
2013-06-04Update database schema to include unique keysCameron Kelley1-5/+5
Slightly updated the basic db schema setup to include unique columns; this required some columns to be converted to the 'varchar' type.
2013-06-02Rename JwtBearerTest.php to JWTBearerTest.phpBrent Shaffer1-0/+0
woops wrong branch
2013-06-02Rename JWTBearerTest.php to JwtBearerTest.phpBrent Shaffer1-0/+0
2013-06-01standardizes error messages by removing period on scope and redirect errorsBrent Shaffer8-10/+10
2013-06-01fixes #134 - allows for client_secret to be empty in post body if the client ↵Brent Shaffer3-3/+30
secret is an empty string
2013-06-01adds convenience getters/setters onto the server class (for real)Brent Shaffer1-0/+50
2013-06-01addresses #147 - documents 'state' parameter/requirement in READMEBrent Shaffer1-4/+17
2013-06-01adds convenience getters/setters onto the server classBrent Shaffer1-1/+2
2013-06-01updates README to point to oauth2-demo-php for renameBrent Shaffer1-3/+3
2013-05-30removes unnecessary issetBrent Shaffer1-1/+1
2013-05-30addresses #143 - adds WWW-Authenticate to 400 responses, removes error codes ↵Brent Shaffer3-26/+25
from invalid requests
2013-05-30addresses #145 - fixes status code for insufficient_scope requestsBrent Shaffer2-4/+12
2013-05-30refactors controller testsBrent Shaffer5-126/+111
2013-05-30fixes formatting from #142, fixes same issue in a different spotBrent Shaffer1-8/+18
2013-05-29adds scopeutil constructor doc blockBrent Shaffer1-0/+4
2013-05-29fixes #144 - correct mimeType parsing in headerBrent Shaffer2-1/+37
2013-05-29Merge pull request #142 from rjmackay/developBrent Shaffer1-3/+8
Fix 401 response from ResourceController
2013-05-29Fix 401 response from ResourceControllerRobbie Mackay1-3/+8
* Add missing s on %s to make sure we return realm value. * Add error and error_description to WWW-Authenticate header per http://tools.ietf.org/html/rfc6750#section-3 * Remove wrong error_uri parameter return because of extra params passed to setError()
2013-05-29adds interface methods to CompatibilityInterfaceBrent Shaffer1-1/+2
2013-05-29Merge branch 'develop' of https://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer1-0/+5
develop
2013-05-29Merge pull request #140 from rjmackay/fix-resource-request-errorBrent Shaffer1-0/+5
Ensures resource request errors not overwritten by the insufficient_scope erro
2013-05-29Return from verifyResourceRequest() if we don't have token dataRobbie Mackay1-0/+5
This ensures any error response already set in getAccessTokenData gets returned, not overwritten by the 'insufficient_scope' error.
2013-05-28attempts to standardize documentation a little betterBrent Shaffer9-49/+41
2013-05-28** BC-BREAKING CHANGE ** - addresses #139 - makes ↵Brent Shaffer1-2/+5
OAuth2_Storage_UserCredentialsInterface::getUserDetails required to return user_id
2013-05-28standardizes tests - uses arrays instead of setting query directly in ↵Brent Shaffer4-108/+131
Controller tests
2013-05-28** BC-BREAKING CHANGE ** - addresses #80: hardens default security by making ↵Brent Shaffer6-4/+57
'enforce_state' param in AuthorizationServer true by default
2013-05-28** BC-BREAKING CHANGE ** - addresses #80: requires exact matching of URL by ↵Brent Shaffer3-7/+32
default, rather than only matching the beginning string
2013-05-28cleans up redirect URI validationBrent Shaffer3-29/+86
2013-05-28merges develop into trunk for v0.8 tagv0.8Brent Shaffer63-1132/+2018
2013-05-28updating most recent tag in the README to v0.8Brent Shaffer1-1/+1
2013-05-26fixes #27 - adds way to pass in custom clientassertiontype to server objectBrent Shaffer2-12/+46
2013-05-25adds ability to pass headers explicitly to Request objectBrent Shaffer1-4/+5
2013-05-25Merge branch 'develop' of http://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer1-1/+1
develop
2013-05-25fixes #137 - allows for multiple request_uris and adds tests for thisBrent Shaffer4-4/+40
2013-05-23Merge pull request #135 from dangreaves/developBrent Shaffer1-1/+1
Fixed readme typo
2013-05-23Fixed readme typoDan Greaves1-1/+1