summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)AuthorFilesLines
2013-05-09better name for variables in AuthorizeControllerBrent Shaffer1-2/+2
2013-05-09adds defaults for OAuth2_Response objects back to the server classBrent Shaffer3-20/+27
2013-05-09cherry-picks redis class大兵2-1/+196
2013-05-09fixes fatal error and adds test to catch it next timeBrent Shaffer1-1/+1
2013-05-09allows for injection of tokenType into the server objectBrent Shaffer1-26/+24
2013-05-09** BC-BREAKING CHANGES ** - changes TokenController constructor so ↵Brent Shaffer2-11/+20
ClientAssertionType is now the third parameter instead of the first, and it no longer accepts Storage_ClientCredentials, but has to be ClientAssertionTypeInterface
2013-05-09adds 'createDefault' methods for all controllers - more accurate naming of ↵Brent Shaffer1-32/+47
functions
2013-05-09adds setters for controller classes, standardises order of the controller ↵Brent Shaffer1-85/+112
classes, moves protected methods to bottom
2013-05-09** BC-BREAKING CHANGE - accessTokenResponseType parameter in server class is ↵Brent Shaffer1-22/+18
redundant. This can be derived from the responseType parameter already passed in. Getting rid of it
2013-05-09updates readme and docblocks for response refactorBrent Shaffer3-5/+10
2013-05-09fixes variable namesBrent Shaffer1-2/+2
2013-05-06fixes php 5.2 issue with interfaces sharing method namesBrent Shaffer3-6/+29
2013-05-06cleans up ResponseInterfaceBrent Shaffer4-11/+12
2013-05-06BC-BREAKING CHANGE - Updates AuthorizeControllerInterface, ResponseInterfaceBrent Shaffer11-185/+45
2013-05-05BCBREAKING CHANGE - Updates to AuthorizeControllerInterface, ↵Brent Shaffer7-55/+41
ResourceControllerInterface, TokenTypeInterface
2013-05-05all GrantType tests passBrent Shaffer4-46/+57
2013-05-05BC BREAKING CHANGES - Refactors interfaces for GrantType, ↵Brent Shaffer11-249/+309
ClientAssertionType, and TokenController
2013-05-05moves private method to bottomBrent Shaffer1-44/+44
2013-05-05adds typehinting for getJWTDataBrent Shaffer1-1/+1
2013-05-05refactors scope validation and adds scope testing for all grant typesBrent Shaffer8-33/+45
2013-05-05addresses #88 - 'FromRequest' does not really make sense, as there are ↵Brent Shaffer9-13/+13
multiple places this data is stored
2013-05-05TokenController cleanupBrent Shaffer2-23/+25
2013-05-05addresses #113 - refactors grant types - they are much cleaner and intuitive nowBrent Shaffer8-227/+103
2013-04-29Update Server.phpBrent Shaffer1-4/+0
**BC-BREAKING CHANGE** - addresses #108 - removes default jwt granting, as "audience" is required. This needs to be set using `addGrantType` instead.
2013-04-29Merge pull request #112 from rjmackay/developBrent Shaffer3-22/+32
**BC-BREAKING CHANGE** - moves `checkRestrictedGrantType` from `ClientCredentialsInterface` to `ClientCredentialsInterface`. See #111 and #112
2013-04-29Merge pull request #109 from bojanz/unbounded_scopesBrent Shaffer5-38/+30
Better support for unbounded scopes.
2013-04-29Fix undefined index 'client_id' errors in OAuth2_Server_Authorize_* TestsRobbie Mackay1-2/+2
2013-04-29Move checkRestrictedGrantType() to ClientInterfaceRobbie Mackay3-20/+20
Make more sense to have checkRestrictedGrantType in ClientInterface instead of ClientCredentialsInterface as its not really anything to do with 'credentials'. Revert AuthorizeController $clientStorage parameter to ClientInterface
2013-04-29Check client's allowed grant types for authorize requests #111Robbie Mackay1-4/+14
Add checks for restricted grant type to Authorize Controller. Means that clients need 'implicit' grant type to use implicit flow, and clients that can't use auth code flow get bumped on the authorization step not the token step.
2013-04-29Better support for unbounded scopes.Bojan Zivanovic5-38/+30
2013-04-28Change Statuscode 400 to 405 if POST-Request is requiredsteffkes1-1/+2
As per http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.6 change the statuscode from 400 to 405 and include `Allow`-header indicating that POST must be used to grant an access token.
2013-04-24Update Pdo.phpBrent Shaffer1-2/+3
fixed #106
2013-04-20fixes #86 - makes http basic authentication POST check optional and removes ↵Brent Shaffer2-11/+16
GET check
2013-04-16User details must have a 'user_id' field, to store in token dataJulien Chaumond1-1/+4
2013-04-16Use spaces instead of tabs, to be consistent with the rest of the lib.Julien Chaumond1-237/+237
2013-04-16Make OAuth2_Storage_Mongo properties protectedJulien Chaumond1-2/+2
2013-04-16Fix MongoDB server stringJulien Chaumond1-1/+1
2013-04-06Merge pull request #89 from bojanz/fix-config-referencesBrent Shaffer1-2/+2
Fix incorrect references to config variables.
2013-04-04Merge pull request #95 from itsmrwave/developBrent Shaffer1-2/+2
Wrap realm & scope values in "" on 401 errors
2013-04-03Place the realm & scope values in ""King'ori Maina1-2/+2
- On Android, the lack of "" caused the Java to throw exceptions when trying to read the response code (Android assumes that when we have a response code like 401 we have the WWW-Authenticate header set) ... also ... it seems that Android is very particlular about the "" - Most examples from the specs have the values of realm in "" i.e. - - http://tools.ietf.org/html/rfc2617#section-3.5 - - http://tools.ietf.org/html/draft-ietf-oauth-v2-10#section-5.2
2013-04-02being anal and replacing 'xxx === null' with 'is_null(xxx)'Brent Shaffer1-1/+1
2013-04-02Merge pull request #74 from bojanz/no_error_on_missing_token_paramBrent Shaffer1-10/+4
Missing token param in getAccessTokenData() doesn't return an appropriate error response
2013-04-02Merge branch 'develop' of http://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer1-1/+0
develop
2013-04-02fixes #90 - sets response property in handleAuthorizeRequestBrent Shaffer1-1/+1
2013-04-02Remove redundant code in getAccessTokenData(), fix token check that is too ↵Bojan Zivanovic1-10/+4
strict.
2013-03-30Remove duplicated line in Server.phpBojan Zivanovic1-1/+0
2013-03-27adds jwt bearer to default grant typesBrent Shaffer1-0/+5
2013-03-27fixes responseType and grantType bugs so they can be explicitly set in ↵Brent Shaffer1-9/+37
constructor and add methods
2013-03-27fixes merging of parameters in Authorize Controller so that redirect_uri ↵Brent Shaffer1-1/+1
doesn't get missed
2013-03-24Fix incorrect references to config variables.Bojan Zivanovic1-2/+2
generated by cgit v1.2.3 (git 2.39.0) at 2026-09-14 02:59:54 +0300