summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2013-08-12fixes unnecessary BC breaking changes made by 69ba3a2v1.0Brent Shaffer4-27/+42
2013-08-11fixes getUserCredentials by standardizing on 'user_id' for all fieldsBrent Shaffer9-53/+95
2013-08-11Merge branch 'develop' of https://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer1-10/+12
develop
2013-08-11Merge pull request #203 from ademarre/201-configure-redir-codeBrent Shaffer1-10/+12
Add redirect_status_code config param for AuthorizeController
2013-08-11Merge branch 'develop' of https://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer6-7/+29
develop
2013-08-11fixes #205 - ensures unnecessary ? is not set when query is emptyBrent Shaffer1-1/+1
2013-08-05Merge pull request #204 from bgaluszka/developBrent Shaffer1-1/+1
Fixed call to LogicException
2013-08-04Fixed call to LogicExceptionBartosz Gałuszka1-1/+1
2013-08-01Add redirect_status_code config param for AuthorizeControllerAndre DeMarre1-10/+12
2013-07-31Merge pull request #202 from Rockstar04/issue-200Brent Shaffer5-6/+28
Add explode to checkRestrictedGrant in PDO Storage
2013-07-31Add unit testing and apply fix to checkRestricted method of Redis storageTrent Petersen2-1/+4
2013-07-31Add test for storage check restricted grant typeTrent Petersen2-4/+21
2013-07-31Merge branch 'develop' of https://github.com/bshaffer/oauth2-server-php into ↵Trent Petersen2-2/+35
issue-200
2013-07-31Add explode to checkRestrictedGrant in PDO StorageTrent Petersen1-1/+3
2013-07-29fixes #197 - adds support for 'false' default scope in Token controllerBrent Shaffer2-2/+35
2013-07-24fixes #192 - reference errors and adds testsBrent Shaffer6-3/+25
2013-07-24fix undefined classes.Yuichi Shiwaku6-8/+8
2013-07-24fixes #194 - makes some appropriate properties protected instead of privateBrent Shaffer11-30/+33
2013-07-18moves documentation to github pagesBrent Shaffer1-514/+1
2013-07-16fixes #191 - passes config to HttpBasicBrent Shaffer2-1/+19
2013-07-15fixes #190 - validates client credentials before grant typeBrent Shaffer1-6/+14
2013-07-15Revert "adds mongo tests back since this is fixed: ↵Brent Shaffer1-0/+8
https://github.com/travis-ci/travis-build/issues/87" This reverts commit 5fcd6c29e8cecc58049076fcb4e4f1dc97020d1d.
2013-07-15Merge branch 'develop' of https://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer2-2/+15
develop
2013-07-15adds mongo tests back since this is fixed: ↵Brent Shaffer1-8/+0
https://github.com/travis-ci/travis-build/issues/87
2013-07-13Merge pull request #171 from davidkuridza/fix-redirect-in-authorization-flowBrent Shaffer2-2/+15
Fix wrong redirect following authorization step
2013-07-09Merge pull request #187 from F21/getDefaultScope_client_idBrent Shaffer7-7/+26
client_id is now passed to getDefaultScope().
2013-07-08Added another assertion for ScopeTest.F211-0/+1
2013-07-08client_id is now passed to getDefaultScope().F217-7/+25
2013-07-06Add unit test to check redirect_uri value, refs #171, refs #163David Kuridža1-1/+2
2013-07-06Fix wrong redirect following authorization step, refs #171David Kuridža1-1/+13
Fix for #163 (https://github.com/bshaffer/oauth2-server-php/issues/163) allowed authorize flow to handle `redirect_uri` as an optional parameter. The change resulted in user not being redirected back to the client after granting or denying client's access. This fix verifies whether `redirect_uri` is set or not in `OAuth2\Controller\AuthorizeController`'s `handleAuthorizeRequest()` method. If it's not set, it grabs the client's registered value. If/When support for PHP 5.3 is dropped, the code can be modified to `$this->clientStorage->getClientDetails($this->client_id)['redirect_uri']`.
2013-07-04Update Mongo.phpBrent Shaffer1-3/+4
Fixes #185 - mongo credentials check
2013-07-03Update Redis.phpBrent Shaffer1-1/+1
Fixes #180 - case correction for JWTBearerInterface
2013-06-29Merge pull request #176 from trickleup/developBrent Shaffer1-0/+1
Require refresh_token in getRefreshToken response
2013-06-29Require refresh_token in getRefreshToken responseJohan Genberg1-1/+1
Added "identifier" to description.
2013-06-29Require refresh_token in getRefreshToken responseJohan Genberg1-0/+1
2013-06-28Merge pull request #174 from trickleup/developBrent Shaffer1-1/+1
make user_id not required for refresh_token grant
2013-06-28make user_id not required for refresh_token grantJohan Genberg1-1/+1
2013-06-28Merge pull request #173 from Rockstar04/patch-1Brent Shaffer1-5/+0
Duplication in JwtBearer Grant
2013-06-28Duplication in JwtBearer GrantTrent Petersen1-5/+0
Corrects duplicate check in the validateRequest method found in #172
2013-06-28Merge pull request #168 from trickleup/developBrent Shaffer1-1/+1
Merged while driving through Eastern Oregon
2013-06-28user_id not required for authorization_code grantJohan Genberg1-1/+1
2013-06-24Update README.mdBrent Shaffer1-1/+1
2013-06-23addresses #133 - hardens default security for user objectsBrent Shaffer1-1/+4
2013-06-23removes redirect_uri from token request in README - no longer required ↵Brent Shaffer1-1/+1
thanks to #163
2013-06-23cleans up SQL whitespace inconsistenciesBrent Shaffer1-3/+3
2013-06-23addresses #163 - allows redirect_uri on authorization_code to be NULL in ↵Brent Shaffer1-1/+1
docs example
2013-06-23fixes #162 - adds getToken on ResourceController for convenienceBrent Shaffer1-0/+10
2013-06-23fixes #161 - specifies PHP version to be 5.3.9 and upBrent Shaffer1-1/+1
2013-06-23better tests for 302 redirects - ensures errors are not includedBrent Shaffer1-18/+17
2013-06-23fixes #163 - only saves submitted redirect_uris to the authorization code, ↵Brent Shaffer2-8/+94
so no redirect_uri is properly handled in token controller. AuthorizeController->validateRequest now returns a boolean instead of params array. Parameters can be accessed using the new class getter functions
generated by cgit v1.2.3 (git 2.39.0) at 2026-11-11 19:07:43 +0300