summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2015-01-17Merge pull request #496 from bshaffer/developv1.6Brent Shaffer25-146/+742
Tag v1.6
2015-01-17changelog for v1.6Brent Shaffer1-0/+14
2015-01-15Merge pull request #498 from aledelgo/patch-1Brent Shaffer1-3/+0
Removed set of mongo.native_long from Mongo.php
2015-01-13Removed set of mongo.native_long from Mongo.phpAlessandro Del Gobbo1-3/+0
Removed ini_set('mongo.native_long', 1) as it's not supported on 32 bit machine. Also that value is set to 1 by default. https://github.com/mongodb/mongo-php-driver/commit/374d8048d3d512057ade23a7538d5f4bb2a7fdd1 With that instruction, the project run fails with error: Fatal error: ini_set(): To prevent data corruption, you are not allowed to turn on the mongo.native_long setting on 32-bit platforms in Unknown on line 0
2014-12-10Merge pull request #489 from pedrosancao/pdo-fetch-modeBrent Shaffer1-13/+13
Set fetch mode to PDO::FETCH_BOTH in fetch and fetchAll calls
2014-12-10Merge pull request #490 from Gargaj/patch-1Brent Shaffer1-1/+1
Allow any whitespace as a redirect URI delimiter
2014-12-10Merge pull request #491 from dan-james-deeson/patch-1Brent Shaffer1-2/+2
http_build_query sometimes joins with "&"
2014-12-03http_build_query sometimes joins with "&"dan-james-deeson1-2/+2
I've no idea why, but http_build_query sometimes builds the query with & as the joing string, rather than the proper default of &. See http://php.net/manual/en/function.http-build-query.php#102324. This is happening to me :( Thanks!
2014-11-23Allow any whitespace as a redirect URI delimiterGargaj1-1/+1
None of them are valid URI components, and line-breaks make them easier to maintain.
2014-11-06set mode to PDO::FETCH_BOTH in fetch callsPedro Sanção1-13/+13
2014-11-04Merge pull request #480 from sarciszewski/patch-1Brent Shaffer1-1/+16
Use hash_equals() for signature verification
2014-10-23Use hash_equals() for signature verificationScott Arciszewski1-1/+16
2014-10-22Merge pull request #481 from sarciszewski/patch-2Brent Shaffer1-10/+19
Update AccessToken.php
2014-10-22Update AccessToken.phpScott Arciszewski1-10/+19
When a CSPRNG is available, just grab as many bytes as necessary and return `bin2hex($randomData)'. When there isn't, use the legacy hashing mode. Though PHP >= 5.3.0 will always have `openssl_random_pseudo_bytes()` available.
2014-10-15Merge pull request #475 from pbfteambox/developBrent Shaffer1-0/+9
Add missing JTI table definitiion
2014-10-15Add missing JTI table definitiionPatrick Bihan-Faou1-0/+9
2014-10-07minor travis changes - lock the icon down to the develop branch, and move ↵Brent Shaffer2-3/+2
mongo ENV variable into 'global'
2014-10-07Merge pull request #471 from ↵Brent Shaffer2-4/+14
bshaffer/paulstatezny-method-inspecific-authorize-request-validation Make validateAuthorizeRequest available for POST in addition to GET
2014-10-07Make validateAuthorizeRequest available for POST in addition to GETPaul Statezny2-4/+14
Allow client_id, redirect_uri, response_type, and state to come from either GET or POST params. Port modified `get` method from HttpFoundation Request and add tests.
2014-10-07Merge pull request #470 from bshaffer/npmarrin-developBrent Shaffer9-39/+106
** BC Break ** - Renames TokenIdToken to IdTokenToken - order does not matter for multi-valued response types
2014-10-07order does not matter for multi-valued response types - see #452Brent Shaffer7-53/+84
2014-10-07Fix for token id_token combination as per ↵Nathaniel Marrin8-26/+62
http://openid.net/specs/oauth-v2-multiple-response-types-1_0.html#Combinations matching the sample authorization request from the same source and section rename TokenIdToken to IdTokenToken
2014-09-16Merge pull request #460 from jaredtking/issue-338-rename-jwt-access-token-claimsBrent Shaffer3-6/+55
Rename JWT claims for JWT Access Tokens: #338
2014-09-16Rename JWT claims for JWT Access Tokens to better match the claims provided ↵Jared King3-6/+55
by the spec
2014-09-03Merge pull request #437 from bshaffer/issue-338-rename-crypto-to-jwtBrent Shaffer8-66/+66
*** BC BREAKING *** renames CryptoToken to JwtAccessToken and renames use_crypto_tokens to use_jwt_access_tokens
2014-09-03Merge pull request #447 from raucter/oauth2-server-php-couchbaseBrent Shaffer3-0/+413
Oauth2 server php couchbase
2014-08-29adds changelog for v1.5 tagBrent Shaffer1-0/+14
2014-08-28When testing Couchbase connection now use a CouchbaseException as that is ↵Tom Park1-1/+1
what will be thrown
2014-08-28Merge pull request #446 from bshaffer/developv1.5Brent Shaffer55-300/+1478
Tag v1.5
2014-08-28Fixed some issues with Couchbase storage and added tests for the storage typeTom Park3-0/+83
2014-08-27Store type of data inside object to ease view creation to query the datatom1-9/+8
2014-08-27Added a Couchbase storage implementationTom Park1-0/+331
2014-08-22adds tests for #442, fixes #441Brent Shaffer2-1/+13
2014-08-22Merge pull request #442 from relaxnow/bugfix/missing-use-statementBrent Shaffer1-0/+1
Added missing use statement for OAuth2\Scope in UserInfoController
2014-08-22Merge pull request #444 from johnikx/feature-remove-default-valueBrent Shaffer2-2/+2
remove redundant default value from argument
2014-08-19remove redundant default value from argumentJan Brecka2-2/+2
2014-08-19Added missing use statement for OAuth2\Scope in UserInfoControllerBoy Baukema1-0/+1
2014-08-12skip DynamoDB if it takes longer than 30 secondsBrent Shaffer1-4/+15
2014-08-12renames CryptoToken to JwtAccessToken and renames use_crypto_tokens to ↵Brent Shaffer8-66/+66
use_jwt_access_tokens
2014-07-31Merge pull request #432 from valheranze/430-openid_state_fixBrent Shaffer2-1/+157
Fixes: State retrieval in OpenID AuthorizationController, closes #430
2014-07-31Fixes: State retrieval in OpenID AuthorizationController and test for ↵Anže Valher2-1/+157
Controller, #430
2014-07-27Merge pull request #423 from Snooze-/refresh-undef-scope-fixBrent Shaffer1-1/+1
Add a set check for scope in refresh token grant
2014-07-22Add a set check for scope in refresh token grantderick1-1/+1
The refresh token interace suggests that returning a scope is optional, however the refresh token grant does not handle undefined scopes in the getScope method correctly the same way other grants, such as the user credentials grant does. Modified the getScope method in RefreshToken to return null if the storage class's getRefreshToken method does not return a scope.
2014-07-11Merge pull request #404 from dallasvogels/issue386Brent Shaffer2-4/+4
addresses #386, renamed error name for malformed/expired tokens
2014-07-10Merge pull request #415 from bshaffer/add-dynamodb-support-to-travisBrent Shaffer5-92/+197
testing out dynamodb support in travis.ci
2014-07-10testing out dynamodb support in travis.ciBrent Shaffer5-92/+197
2014-07-09Merge pull request #414 from bshaffer/issue-397Brent Shaffer2-15/+59
**BC-BREAKING** - fixes #397, refresh tokens should not be encrypted ins...
2014-07-09**BC-BREAKING** - fixes #397, refresh tokens should not be encrypted inside ↵Brent Shaffer2-15/+59
crypto tokens
2014-07-09Merge pull request #400 from bshaffer/issue-354Brent Shaffer4-17/+94
fixes #354 - bundles PDO SQL with the library
2014-07-09fixes #354 - bundles PDO SQL with the libraryBrent Shaffer4-17/+94