summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2013-05-09increments tag in readmev0.7Brent Shaffer1-2/+2
2013-05-09Merge branch 'develop-before-grant-type-refactor'Brent Shaffer14-167/+180
2013-04-29Update Server.phpBrent Shaffer1-4/+0
**BC-BREAKING CHANGE** - addresses #108 - removes default jwt granting, as "audience" is required. This needs to be set using `addGrantType` instead.
2013-04-29Merge pull request #112 from rjmackay/developBrent Shaffer4-22/+36
**BC-BREAKING CHANGE** - moves `checkRestrictedGrantType` from `ClientCredentialsInterface` to `ClientCredentialsInterface`. See #111 and #112
2013-04-29Merge pull request #109 from bojanz/unbounded_scopesBrent Shaffer8-55/+36
Better support for unbounded scopes.
2013-04-29Update README.mdBrent Shaffer1-1/+1
fixes #114 - changes "locahost" to "localhost"
2013-04-29Fix undefined index 'client_id' errors in OAuth2_Server_Authorize_* TestsRobbie Mackay1-2/+2
2013-04-29Fixing OAuth2_ServerTest::testAddingResponseTypeRobbie Mackay1-0/+4
Make mock storage return TRUE for 'checkRestrictedGrantType'
2013-04-29Move checkRestrictedGrantType() to ClientInterfaceRobbie Mackay3-20/+20
Make more sense to have checkRestrictedGrantType in ClientInterface instead of ClientCredentialsInterface as its not really anything to do with 'credentials'. Revert AuthorizeController $clientStorage parameter to ClientInterface
2013-04-29Check client's allowed grant types for authorize requests #111Robbie Mackay1-4/+14
Add checks for restricted grant type to Authorize Controller. Means that clients need 'implicit' grant type to use implicit flow, and clients that can't use auth code flow get bumped on the authorization step not the token step.
2013-04-29Better support for unbounded scopes.Bojan Zivanovic8-55/+36
2013-04-28Merge pull request #110 from steffkes/developBrent Shaffer1-1/+2
Change Statuscode 400 to 405 if POST-Request is required
2013-04-28Change Statuscode 400 to 405 if POST-Request is requiredsteffkes1-1/+2
As per http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.6 change the statuscode from 400 to 405 and include `Allow`-header indicating that POST must be used to grant an access token.
2013-04-25remove json highlightingBrent Shaffer1-1/+1
2013-04-24standardizes code block format and intendationBrent Shaffer1-38/+40
2013-04-24places Grant Types above Response Object - it is more interestingBrent Shaffer1-38/+38
2013-04-24more README fixes - better method organizationBrent Shaffer1-9/+15
2013-04-24better readme - SQL code samples and DSN explanationBrent Shaffer1-0/+12
2013-04-24Merge branch 'develop' of http://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer1-2/+3
develop
2013-04-24Update Pdo.phpBrent Shaffer1-2/+3
fixed #106
2013-04-24Merge branch 'develop'v0.6Brent Shaffer1-4/+4
2013-04-24updates README in preparation for v0.6Brent Shaffer1-4/+4
2013-04-24Merge branch 'develop'Brent Shaffer21-398/+475
2013-04-20fixes #86 - makes http basic authentication POST check optional and removes ↵Brent Shaffer2-11/+16
GET check
2013-04-20Merge branch 'develop' of github.com:bshaffer/oauth2-server-php into developBrent Shaffer1-1/+1
2013-04-17Merge pull request #99 from staabm/patch-1Brent Shaffer1-1/+1
fixed typo
2013-04-17fixed typoMarkus Staab1-1/+1
2013-04-17Merge branch 'julien-c-develop' into developBrent Shaffer1-237/+240
2013-04-17Merge branch 'develop' of https://github.com/julien-c/oauth2-server-php into ↵Brent Shaffer1-237/+240
julien-c-develop
2013-04-17Merge branch 'develop' of http://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer2-16/+3
develop
2013-04-16User details must have a 'user_id' field, to store in token dataJulien Chaumond1-1/+4
2013-04-16Use spaces instead of tabs, to be consistent with the rest of the lib.Julien Chaumond1-237/+237
2013-04-16Make OAuth2_Storage_Mongo properties protectedJulien Chaumond1-2/+2
2013-04-16Fix MongoDB server stringJulien Chaumond1-1/+1
2013-04-07Merge pull request #97 from itsmrwave/developBrent Shaffer1-14/+1
Only keep project specific prefs in ignore file
2013-04-06Only keep project specific prefs in ignore fileKing'ori Maina1-14/+1
As per best practice ... .gitignore file will be a lot more elegant if it only lists files that are related to the projects. Global ignore file should keep overall ignores (OS files) & personal prefs like your personal editor generated files - https://help.github.com/articles/ignoring-files - http://augustl.com/blog/2009/global_gitignores/
2013-04-06Merge pull request #89 from bojanz/fix-config-referencesBrent Shaffer1-2/+2
Fix incorrect references to config variables.
2013-04-04Merge branch 'develop' of http://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer1-2/+2
develop
2013-04-04Merge branch 'master' of http://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer0-0/+0
develop
2013-04-04skipping mongo tests due to bugs in travis.ciBrent Shaffer2-1/+5
2013-04-04Merge pull request #95 from itsmrwave/developBrent Shaffer1-2/+2
Wrap realm & scope values in "" on 401 errors
2013-04-03Place the realm & scope values in ""King'ori Maina1-2/+2
- On Android, the lack of "" caused the Java to throw exceptions when trying to read the response code (Android assumes that when we have a response code like 401 we have the WWW-Authenticate header set) ... also ... it seems that Android is very particlular about the "" - Most examples from the specs have the values of realm in "" i.e. - - http://tools.ietf.org/html/rfc2617#section-3.5 - - http://tools.ietf.org/html/draft-ietf-oauth-v2-10#section-5.2
2013-04-02being anal and replacing 'xxx === null' with 'is_null(xxx)'Brent Shaffer1-1/+1
2013-04-02Merge branch 'develop' of http://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer1-10/+4
develop
2013-04-02Merge pull request #74 from bojanz/no_error_on_missing_token_paramBrent Shaffer1-10/+4
Missing token param in getAccessTokenData() doesn't return an appropriate error response
2013-04-02Merge branch 'develop' of http://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer1-1/+0
develop
2013-04-02fixes #90 - sets response property in handleAuthorizeRequestBrent Shaffer1-1/+1
2013-04-02Remove redundant code in getAccessTokenData(), fix token check that is too ↵Bojan Zivanovic1-10/+4
strict.
2013-03-30Merge pull request #92 from bojanz/duplicate_linesBrent Shaffer1-1/+0
Remove duplicated line in Server.php
2013-03-30Remove duplicated line in Server.phpBojan Zivanovic1-1/+0
generated by cgit v1.2.3 (git 2.39.0) at 2026-11-11 16:58:24 +0300