summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)AuthorFilesLines
2017-12-01Callable for customizing JWT payload (#804)developAndrey Filippov2-2/+19
2017-09-26adds php 7.2 to travis (#873)Brent Shaffer1-1/+1
2017-09-19Fix count() error on PHP 7.2 (#872)Tom Mettam1-1/+1
2017-09-15Fix PHPDoc (#851)Maxime Ailloud4-8/+8
2017-09-14use random_bytes if available (#834)oittaa2-2/+10
2017-05-04Fix CORS issue for revoking and requesting an access token (#829)Oleg Kuzava1-5/+17
2017-05-01PHPDoc improvements and type hinting of variables. (#828)Brent Shaffer53-478/+1903
2017-02-02could not resist to simplify constructorVytautas Stankus1-15/+2
2017-02-02removed unused class attributeVytautas Stankus1-2/+0
2017-01-11changed method name to more accurate createPayloadVytautas Stankus1-2/+2
2017-01-10added protected generatePayload() method to allow easier customization of ↵Vytautas Stankus1-17/+24
jwt token payload
2017-01-07Add mongo db (#790)Brent Shaffer2-0/+433
* add mongodb extension for php 7.x to travis * removes mongodb library for php5 from travis * removes HHVM from travis
2016-12-23Use OpenSSL random method before attempting Mcrypt's. (#773)Đào Hoàng Sơn2-7/+7
2016-12-23no access token supplied to resource controller results in emptry request ↵Brent Shaffer1-1/+1
body (#759)
2016-12-23Fix doc comments and double quoted strings (#762)Tymoteusz Motylewski4-36/+105
Fixed some doc comments to make working with the project easier in the IDE. Also changed some strings to single quoted to prevent interpreting backslash as escape character.
2016-12-23Fix "redirect_uri_mismatch" for URIs with encoded characters (#776)Mathieu Rochette1-1/+1
* add test to showcase a bug when comparaing redirect_uri in grant type "code" * fix redirect_uri comparaison with grant type "code"
2016-12-23RFC6750 compatibility (#784)Piotr G1-1/+1
2016-11-16Remove extra semicolon (#781)hongjinlin1-1/+1
2016-07-27Issue 725 (#729)Brent Shaffer7-17/+50
* ensures unsetAccessToken and unsetRefreshToken return a bool
2016-07-15Fix UserClaims for CodeIdToken (#749)Brent Shaffer1-2/+2
Remove dereferencing for support PHP 5.3 adds tests
2016-06-08Add missing array_merge() parameterSteve1-1/+1
2016-01-12fix: Token Response's Content-Type to application/jsonKen Morishita2-2/+6
fix: at_hash digest computation('hash' function must be used with raw_output=true )
2016-01-12Fix for #663 and Test caseMaks1-1/+6
2016-01-11Merge pull request #672 from ashiina/hash_passwordBrent Shaffer3-6/+24
Implemented method to override the password hashing algorithm
2015-12-08Merge pull request #673 from afilippov1985/Fix-typo-in-PDO-storage-DDLBrent Shaffer1-1/+1
Fix typo in PDO storage DDL
2015-11-19Fix typo in PDO storage DDLAndrey Filippov1-1/+1
2015-11-18Pdo,DynamoDB,Cassandra: Implemented method to change the password hashing ↵ashiina@mac-local3-6/+24
algorithm
2015-11-17Bug in client's scope restrictionafilippov19851-2/+2
If set `scope` column in `oauth_clients` table to empty string, then client allowed to any scope even if it not exists in `oauth_scopes` table.
2015-10-07add isPublicClient tests and fixes resulting bugsBrent Shaffer2-6/+11
2015-10-06fix bug in isPublicClient of Cassandra-StorageTobias Gassmann1-1/+1
2015-09-24Allow null for client_secretWilt1-1/+1
Changed `client_secret` declaration in schema to allow NULL values
2015-09-04Passing variables on MongoDB insertJochen Niebuhr1-42/+37
When running in hhvm passing a value as reference will result in a fatal error.
2015-08-27resolves conflicts for firebase encryption classBrent Shaffer1-0/+47
2015-08-26Added support for revoking tokensPatrick Hindmarsh12-0/+181
Implementation follows the Draft RFC7009 OAuth 2.0 Token Revocation. Essentially adds a unsetAccessToken method to all the storage objects, and exposes a revoke endpoint on controllers. The only interesting thing is the ResponseType\AccessToken::revokeToken() method which has to check all token types if the specified type doesn't exist. Maintains BC with v1.x by commenting out the AccessToken interface methods, and annotated an @todo to implement these in 2.x. Throws a \RuntimeException if storage/response objects don't support the interface
2015-07-14Remove extra semicolonAdrien Crivelli1-1/+1
2015-05-26Fixes issue where full product page is ajaxed into a product detail page. ↵Q1-1/+1
Product page inception, bro
2015-05-21Merge pull request #593 from bshaffer/php-cs-fixerBrent Shaffer7-14/+10
runs php-cs-fixer
2015-05-21fixes #591 - adds jtiBrent Shaffer1-1/+3
2015-05-21runs php-cs-fixerBrent Shaffer7-14/+10
- using the command "php-cs-fixer fix . --fixers=-phpdoc_params"
2015-05-11Merge pull request #583 from bshaffer/issue-574Brent Shaffer1-6/+6
fixes #547 - ensures Grant Type identifier is passed to tokencontroller
2015-05-10Added FirebaseJwt bridge to allow firebase/php-jwt to be used.F211-0/+47
2015-05-09fixes #547 - ensures Grant Type identifier is passed to tokencontrollerBrent Shaffer1-6/+6
2015-05-05fixes BC issue from #571Brent Shaffer1-0/+8
2015-04-24adds tests and server integration for new refresh token configBrent Shaffer1-1/+2
2015-04-24Merge pull request #571 from Jacketbg/patch-1Brent Shaffer1-2/+5
Added unset_refresh_token_after_use option
2015-04-23Updated JWT lib to address #564Patrick Hindmarsh3-8/+21
An alternate patch that maintains backwards compatibility with existing interfaces, but is unsafe for users who call JWT::decode themselves without passing the allowed arguments array.
2015-04-23Added unset_refresh_token_after_use optionYordan Yordanov1-2/+5
It is set to true by default to preserve the old behavior, but if set to false, it will no longer force the refresh token to expire immediately after use.
2015-04-15Include "issuer" config key when creating default JwtAccessTokenGlenn Schmidt1-1/+1
2015-04-04adds code id_token grant type to openid connectBrent Shaffer6-1/+51
2015-03-31makes possible to inherit Ouath2\Request and use it insteadsol1-1/+1
generated by cgit v1.2.3 (git 2.39.0) at 2026-09-08 20:18:26 +0300