summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)AuthorFilesLines
2015-03-25Merge pull request #509 from djhunx/fix-#505-dynamodb-value-must-not-be-emptyBrent Shaffer1-4/+4
Fix #505 dynamodb value must not be empty
2015-03-10User password storage : align Cassandra to Pdofauguste1-2/+12
2015-03-04fixes #505 - value must not be empty error when using dynamodb storage.jun1-4/+4
Adding test for dynamodb storage. Default scope should be null when none is set in the database. Removing immediate return true in dynamodb test.
2015-03-03Add UserClaimsInterface to Cassandra Storage enginefauguste1-0/+47
2015-03-03Add PublicKeyInterface to Cassandra Storage enginefauguste1-3/+43
2015-02-06Make validateRedirectUri protected to be able to overrideNiko Sams1-1/+1
As suggested in https://github.com/bshaffer/oauth2-server-php/issues/488#issuecomment-70343951 this allows implementing custom validation logic (eg. regexp)
2015-01-27Case insensitive for Bearer token header nameArtur Karaznevič1-1/+1
2015-01-19PDO fetch mode changed to be FETCH_ASSOC instead of FETCH_BOTHaacotroneo1-13/+13
2015-01-13Removed set of mongo.native_long from Mongo.phpAlessandro Del Gobbo1-3/+0
Removed ini_set('mongo.native_long', 1) as it's not supported on 32 bit machine. Also that value is set to 1 by default. https://github.com/mongodb/mongo-php-driver/commit/374d8048d3d512057ade23a7538d5f4bb2a7fdd1 With that instruction, the project run fails with error: Fatal error: ini_set(): To prevent data corruption, you are not allowed to turn on the mongo.native_long setting on 32-bit platforms in Unknown on line 0
2014-12-10Merge pull request #489 from pedrosancao/pdo-fetch-modeBrent Shaffer1-13/+13
Set fetch mode to PDO::FETCH_BOTH in fetch and fetchAll calls
2014-12-03http_build_query sometimes joins with "&"dan-james-deeson1-2/+2
I've no idea why, but http_build_query sometimes builds the query with & as the joing string, rather than the proper default of &. See http://php.net/manual/en/function.http-build-query.php#102324. This is happening to me :( Thanks!
2014-11-06set mode to PDO::FETCH_BOTH in fetch callsPedro Sanção1-13/+13
2014-11-04Merge pull request #480 from sarciszewski/patch-1Brent Shaffer1-1/+16
Use hash_equals() for signature verification
2014-10-23Use hash_equals() for signature verificationScott Arciszewski1-1/+16
2014-10-22Update AccessToken.phpScott Arciszewski1-10/+19
When a CSPRNG is available, just grab as many bytes as necessary and return `bin2hex($randomData)'. When there isn't, use the legacy hashing mode. Though PHP >= 5.3.0 will always have `openssl_random_pseudo_bytes()` available.
2014-10-15Add missing JTI table definitiionPatrick Bihan-Faou1-0/+9
2014-10-07Make validateAuthorizeRequest available for POST in addition to GETPaul Statezny1-4/+4
Allow client_id, redirect_uri, response_type, and state to come from either GET or POST params. Port modified `get` method from HttpFoundation Request and add tests.
2014-10-07order does not matter for multi-valued response types - see #452Brent Shaffer4-7/+31
2014-10-07Fix for token id_token combination as per ↵Nathaniel Marrin5-14/+19
http://openid.net/specs/oauth-v2-multiple-response-types-1_0.html#Combinations matching the sample authorization request from the same source and section rename TokenIdToken to IdTokenToken
2014-09-16Rename JWT claims for JWT Access Tokens to better match the claims provided ↵Jared King2-5/+28
by the spec
2014-09-03Merge pull request #437 from bshaffer/issue-338-rename-crypto-to-jwtBrent Shaffer5-28/+28
*** BC BREAKING *** renames CryptoToken to JwtAccessToken and renames use_crypto_tokens to use_jwt_access_tokens
2014-08-28Fixed some issues with Couchbase storage and added tests for the storage typeTom Park1-0/+4
2014-08-27Store type of data inside object to ease view creation to query the datatom1-9/+8
2014-08-27Added a Couchbase storage implementationTom Park1-0/+331
2014-08-22adds tests for #442, fixes #441Brent Shaffer1-1/+1
2014-08-22Merge pull request #442 from relaxnow/bugfix/missing-use-statementBrent Shaffer1-0/+1
Added missing use statement for OAuth2\Scope in UserInfoController
2014-08-19remove redundant default value from argumentJan Brecka2-2/+2
2014-08-19Added missing use statement for OAuth2\Scope in UserInfoControllerBoy Baukema1-0/+1
2014-08-12renames CryptoToken to JwtAccessToken and renames use_crypto_tokens to ↵Brent Shaffer5-28/+28
use_jwt_access_tokens
2014-07-31Fixes: State retrieval in OpenID AuthorizationController and test for ↵Anže Valher1-1/+1
Controller, #430
2014-07-22Add a set check for scope in refresh token grantderick1-1/+1
The refresh token interace suggests that returning a scope is optional, however the refresh token grant does not handle undefined scopes in the getScope method correctly the same way other grants, such as the user credentials grant does. Modified the getScope method in RefreshToken to return null if the storage class's getRefreshToken method does not return a scope.
2014-07-11Merge pull request #404 from dallasvogels/issue386Brent Shaffer1-2/+2
addresses #386, renamed error name for malformed/expired tokens
2014-07-10Merge pull request #415 from bshaffer/add-dynamodb-support-to-travisBrent Shaffer1-18/+18
testing out dynamodb support in travis.ci
2014-07-10testing out dynamodb support in travis.ciBrent Shaffer1-18/+18
2014-07-09**BC-BREAKING** - fixes #397, refresh tokens should not be encrypted inside ↵Brent Shaffer1-15/+16
crypto tokens
2014-07-09Merge pull request #400 from bshaffer/issue-354Brent Shaffer1-0/+81
fixes #354 - bundles PDO SQL with the library
2014-07-09fixes #354 - bundles PDO SQL with the libraryBrent Shaffer1-0/+81
2014-07-09Merge pull request #401 from bshaffer/fixes-code-standardsBrent Shaffer19-196/+117
code standard fixes - mostly namespaces and whitespace
2014-07-08fixes #413 - passes $format to sprintf()Brent Shaffer1-1/+1
2014-07-08code standard fixes:Brent Shaffer19-196/+117
- namespaces and whitespace - fixes phpdoc blocks
2014-07-08formatting fixesBrent Shaffer15-42/+36
2014-07-08passes in redirect_uri to remove duplicate codeBrent Shaffer2-22/+13
2014-07-08Add support for the prompt parameter ('consent' and 'none').Bojan Zivanovic2-10/+45
Introduce a setNotAuthorizedResponse() method.
2014-07-08fixes #411 - xml output was reversedBrent Shaffer1-1/+1
2014-06-30Openid connect : bug Claims fusion with more than one scope (email profile)fauguste1-1/+1
#408
2014-06-30Openid connect : bug Claims fusion with more than one scope (email profile)fauguste1-1/+1
2014-06-19renamed error name for malformed/expired tokensDallas Vogels1-2/+2
2014-06-14Correct dynamodb test issuesfauguste1-30/+51
2014-06-13Improuve comment headerfauguste1-4/+6
2014-06-12Improved Dynamodb API array parameterfauguste1-63/+18