summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)AuthorFilesLines
2013-04-20fixes #86 - makes http basic authentication POST check optional and removes ↵Brent Shaffer2-11/+16
GET check
2013-04-16User details must have a 'user_id' field, to store in token dataJulien Chaumond1-1/+4
2013-04-16Use spaces instead of tabs, to be consistent with the rest of the lib.Julien Chaumond1-237/+237
2013-04-16Make OAuth2_Storage_Mongo properties protectedJulien Chaumond1-2/+2
2013-04-16Fix MongoDB server stringJulien Chaumond1-1/+1
2013-04-06Merge pull request #89 from bojanz/fix-config-referencesBrent Shaffer1-2/+2
Fix incorrect references to config variables.
2013-04-04Merge pull request #95 from itsmrwave/developBrent Shaffer1-2/+2
Wrap realm & scope values in "" on 401 errors
2013-04-03Place the realm & scope values in ""King'ori Maina1-2/+2
- On Android, the lack of "" caused the Java to throw exceptions when trying to read the response code (Android assumes that when we have a response code like 401 we have the WWW-Authenticate header set) ... also ... it seems that Android is very particlular about the "" - Most examples from the specs have the values of realm in "" i.e. - - http://tools.ietf.org/html/rfc2617#section-3.5 - - http://tools.ietf.org/html/draft-ietf-oauth-v2-10#section-5.2
2013-04-02being anal and replacing 'xxx === null' with 'is_null(xxx)'Brent Shaffer1-1/+1
2013-04-02Merge pull request #74 from bojanz/no_error_on_missing_token_paramBrent Shaffer1-10/+4
Missing token param in getAccessTokenData() doesn't return an appropriate error response
2013-04-02Merge branch 'develop' of http://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer1-1/+0
develop
2013-04-02fixes #90 - sets response property in handleAuthorizeRequestBrent Shaffer1-1/+1
2013-04-02Remove redundant code in getAccessTokenData(), fix token check that is too ↵Bojan Zivanovic1-10/+4
strict.
2013-03-30Remove duplicated line in Server.phpBojan Zivanovic1-1/+0
2013-03-27adds jwt bearer to default grant typesBrent Shaffer1-0/+5
2013-03-27fixes responseType and grantType bugs so they can be explicitly set in ↵Brent Shaffer1-9/+37
constructor and add methods
2013-03-27fixes merging of parameters in Authorize Controller so that redirect_uri ↵Brent Shaffer1-1/+1
doesn't get missed
2013-03-24Fix incorrect references to config variables.Bojan Zivanovic1-2/+2
2013-03-23resolving pull request #77Brent Shaffer7-63/+63
2013-03-23links to docs for error messageBrent Shaffer1-0/+1
2013-03-16fixes #78 - makes db and config protected properties in Pdo storage classBrent Shaffer1-2/+2
2013-03-06Pass the default scope to storage.Bojan Zivanovic2-4/+3
2013-03-03Merge pull request #73 from bojanz/pass_scopeBrent Shaffer2-3/+3
Server doesn't pass $scope to getAccessTokenData().
2013-03-02Merge pull request #75 from bojanz/get_status_textBrent Shaffer1-0/+6
Add a getter function for the Response status text.
2013-03-02Add a getter function for the Response status text.Bojan Zivanovic1-0/+6
2013-03-02Rename controllers to match spec (access -> resource, grant -> token).Bojan Zivanovic7-63/+63
2013-03-02Server doesn't pass $scope to getAccessTokenData().Bojan Zivanovic2-3/+3
2013-03-02Make the allow_implicit config check less strict.Bojan Zivanovic1-1/+1
2013-03-02makes client_id an optional parameter to getSupportedScopes - not all ↵Brent Shaffer3-3/+3
applications will vary scope based on client
2013-03-02fixes #65 - Mongo storage returns false instead of nullBrent Shaffer1-4/+4
2013-03-02tweaks to mongo testsBrent Shaffer1-46/+46
2013-03-02Merge branch 'develop' of http://github.com/julien-c/oauth2-server-php into ↵Brent Shaffer1-5/+11
julien-c-develop
2013-02-26Set the authorization header even if it's not Basic AuthAdam Zimmerman1-5/+8
2013-02-26Let the application determine allowed scopes based on clientAdam Zimmerman4-5/+8
Changes: OAuth2_Storage_ScopeInterface: getSupportedScopes now takes one parameter: $client_id. OAuth2_Storage_Memory: getSupportedScopes takes its required parameter, but doesn't do anything with it. OAuth2_Scope: getSupportedScopes passes its parameter on to the storage object. OAuth2_Controller_AuthorizeController: handleAuthorizeRequest passes on its $client_id variable when it calls validateAuthorizeRequest. ScopeTest: Adds dummy parameter to the getSupportedScopes method call.
2013-02-20Storage\Mongo testsJulien Chaumond1-5/+11
2013-02-20Make Mongo collection helper function protectedJulien Chaumond1-1/+1
2013-02-20Implement MongoDB storage class stubJulien Chaumond1-0/+247
2013-02-20Remove redundancy in setUser example implementationJulien Chaumond1-1/+1
2013-02-03adding HttpBasic client assertion typeBrent Shaffer1-0/+87
2013-02-03adds HttpBasic ClientAssertionType, refactors GrantController to match thisBrent Shaffer4-95/+29
2013-02-02fixes #63 - updates all drafts to RFCs where applicableBrent Shaffer17-38/+38
2013-01-29addresses #50 - adds better testingBrent Shaffer1-8/+17
2013-01-29Merge pull request #61 from dazz/bugfix/ContinueBrent Shaffer1-1/+1
removed the continue as it was from the foreach before
2013-01-29fixes #60 - allows scope to be passed in either request or queryBrent Shaffer1-1/+2
2013-01-29removed the continue as it was from the foreach beforedazz1-1/+1
2013-01-29after a more careful reading of the spec (and modeling github api), removes ↵Brent Shaffer3-9/+11
default scope default (default is now null, for 'I dont care about scope')
2013-01-29Merge branch 'develop' of github.com:bshaffer/oauth2-server-php into developBrent Shaffer2-14/+11
2013-01-29Updated JWT Bearer to check jwt->decode() for false instead of trying to ↵Francis Chuang1-10/+7
catch an exception.
2013-01-29renames Util_JWT to Encyrption_JWT to be explicitBrent Shaffer2-5/+5
2013-01-29renames OAuth2_Util_Scope to OAuth2_Scope for cleaner and less annoying ↵Brent Shaffer4-5/+5
class names
generated by cgit v1.2.3 (git 2.39.0) at 2026-11-12 08:08:21 +0300