| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2013-04-29 | Update Server.php | Brent Shaffer | 1 | -4/+0 | |
| **BC-BREAKING CHANGE** - addresses #108 - removes default jwt granting, as "audience" is required. This needs to be set using `addGrantType` instead. | |||||
| 2013-04-29 | Merge pull request #112 from rjmackay/develop | Brent Shaffer | 3 | -22/+32 | |
| **BC-BREAKING CHANGE** - moves `checkRestrictedGrantType` from `ClientCredentialsInterface` to `ClientCredentialsInterface`. See #111 and #112 | |||||
| 2013-04-29 | Merge pull request #109 from bojanz/unbounded_scopes | Brent Shaffer | 5 | -38/+30 | |
| Better support for unbounded scopes. | |||||
| 2013-04-29 | Fix undefined index 'client_id' errors in OAuth2_Server_Authorize_* Tests | Robbie Mackay | 1 | -2/+2 | |
| 2013-04-29 | Move checkRestrictedGrantType() to ClientInterface | Robbie Mackay | 3 | -20/+20 | |
| Make more sense to have checkRestrictedGrantType in ClientInterface instead of ClientCredentialsInterface as its not really anything to do with 'credentials'. Revert AuthorizeController $clientStorage parameter to ClientInterface | |||||
| 2013-04-29 | Check client's allowed grant types for authorize requests #111 | Robbie Mackay | 1 | -4/+14 | |
| Add checks for restricted grant type to Authorize Controller. Means that clients need 'implicit' grant type to use implicit flow, and clients that can't use auth code flow get bumped on the authorization step not the token step. | |||||
| 2013-04-29 | Better support for unbounded scopes. | Bojan Zivanovic | 5 | -38/+30 | |
| 2013-04-28 | Change Statuscode 400 to 405 if POST-Request is required | steffkes | 1 | -1/+2 | |
| As per http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.6 change the statuscode from 400 to 405 and include `Allow`-header indicating that POST must be used to grant an access token. | |||||
| 2013-04-24 | Update Pdo.php | Brent Shaffer | 1 | -2/+3 | |
| fixed #106 | |||||
| 2013-04-20 | fixes #86 - makes http basic authentication POST check optional and removes ↵ | Brent Shaffer | 2 | -11/+16 | |
| GET check | |||||
| 2013-04-16 | User details must have a 'user_id' field, to store in token data | Julien Chaumond | 1 | -1/+4 | |
| 2013-04-16 | Use spaces instead of tabs, to be consistent with the rest of the lib. | Julien Chaumond | 1 | -237/+237 | |
| 2013-04-16 | Make OAuth2_Storage_Mongo properties protected | Julien Chaumond | 1 | -2/+2 | |
| 2013-04-16 | Fix MongoDB server string | Julien Chaumond | 1 | -1/+1 | |
| 2013-04-06 | Merge pull request #89 from bojanz/fix-config-references | Brent Shaffer | 1 | -2/+2 | |
| Fix incorrect references to config variables. | |||||
| 2013-04-04 | Merge pull request #95 from itsmrwave/develop | Brent Shaffer | 1 | -2/+2 | |
| Wrap realm & scope values in "" on 401 errors | |||||
| 2013-04-03 | Place the realm & scope values in "" | King'ori Maina | 1 | -2/+2 | |
| - On Android, the lack of "" caused the Java to throw exceptions when trying to read the response code (Android assumes that when we have a response code like 401 we have the WWW-Authenticate header set) ... also ... it seems that Android is very particlular about the "" - Most examples from the specs have the values of realm in "" i.e. - - http://tools.ietf.org/html/rfc2617#section-3.5 - - http://tools.ietf.org/html/draft-ietf-oauth-v2-10#section-5.2 | |||||
| 2013-04-02 | being anal and replacing 'xxx === null' with 'is_null(xxx)' | Brent Shaffer | 1 | -1/+1 | |
| 2013-04-02 | Merge pull request #74 from bojanz/no_error_on_missing_token_param | Brent Shaffer | 1 | -10/+4 | |
| Missing token param in getAccessTokenData() doesn't return an appropriate error response | |||||
| 2013-04-02 | Merge branch 'develop' of http://github.com/bshaffer/oauth2-server-php into ↵ | Brent Shaffer | 1 | -1/+0 | |
| develop | |||||
| 2013-04-02 | fixes #90 - sets response property in handleAuthorizeRequest | Brent Shaffer | 1 | -1/+1 | |
| 2013-04-02 | Remove redundant code in getAccessTokenData(), fix token check that is too ↵ | Bojan Zivanovic | 1 | -10/+4 | |
| strict. | |||||
| 2013-03-30 | Remove duplicated line in Server.php | Bojan Zivanovic | 1 | -1/+0 | |
| 2013-03-27 | adds jwt bearer to default grant types | Brent Shaffer | 1 | -0/+5 | |
| 2013-03-27 | fixes responseType and grantType bugs so they can be explicitly set in ↵ | Brent Shaffer | 1 | -9/+37 | |
| constructor and add methods | |||||
| 2013-03-27 | fixes merging of parameters in Authorize Controller so that redirect_uri ↵ | Brent Shaffer | 1 | -1/+1 | |
| doesn't get missed | |||||
| 2013-03-24 | Fix incorrect references to config variables. | Bojan Zivanovic | 1 | -2/+2 | |
| 2013-03-23 | resolving pull request #77 | Brent Shaffer | 7 | -63/+63 | |
| 2013-03-23 | links to docs for error message | Brent Shaffer | 1 | -0/+1 | |
| 2013-03-16 | fixes #78 - makes db and config protected properties in Pdo storage class | Brent Shaffer | 1 | -2/+2 | |
| 2013-03-06 | Pass the default scope to storage. | Bojan Zivanovic | 2 | -4/+3 | |
| 2013-03-03 | Merge pull request #73 from bojanz/pass_scope | Brent Shaffer | 2 | -3/+3 | |
| Server doesn't pass $scope to getAccessTokenData(). | |||||
| 2013-03-02 | Merge pull request #75 from bojanz/get_status_text | Brent Shaffer | 1 | -0/+6 | |
| Add a getter function for the Response status text. | |||||
| 2013-03-02 | Add a getter function for the Response status text. | Bojan Zivanovic | 1 | -0/+6 | |
| 2013-03-02 | Rename controllers to match spec (access -> resource, grant -> token). | Bojan Zivanovic | 7 | -63/+63 | |
| 2013-03-02 | Server doesn't pass $scope to getAccessTokenData(). | Bojan Zivanovic | 2 | -3/+3 | |
| 2013-03-02 | Make the allow_implicit config check less strict. | Bojan Zivanovic | 1 | -1/+1 | |
| 2013-03-02 | makes client_id an optional parameter to getSupportedScopes - not all ↵ | Brent Shaffer | 3 | -3/+3 | |
| applications will vary scope based on client | |||||
| 2013-03-02 | fixes #65 - Mongo storage returns false instead of null | Brent Shaffer | 1 | -4/+4 | |
| 2013-03-02 | tweaks to mongo tests | Brent Shaffer | 1 | -46/+46 | |
| 2013-03-02 | Merge branch 'develop' of http://github.com/julien-c/oauth2-server-php into ↵ | Brent Shaffer | 1 | -5/+11 | |
| julien-c-develop | |||||
| 2013-02-26 | Set the authorization header even if it's not Basic Auth | Adam Zimmerman | 1 | -5/+8 | |
| 2013-02-26 | Let the application determine allowed scopes based on client | Adam Zimmerman | 4 | -5/+8 | |
| Changes: OAuth2_Storage_ScopeInterface: getSupportedScopes now takes one parameter: $client_id. OAuth2_Storage_Memory: getSupportedScopes takes its required parameter, but doesn't do anything with it. OAuth2_Scope: getSupportedScopes passes its parameter on to the storage object. OAuth2_Controller_AuthorizeController: handleAuthorizeRequest passes on its $client_id variable when it calls validateAuthorizeRequest. ScopeTest: Adds dummy parameter to the getSupportedScopes method call. | |||||
| 2013-02-20 | Storage\Mongo tests | Julien Chaumond | 1 | -5/+11 | |
| 2013-02-20 | Make Mongo collection helper function protected | Julien Chaumond | 1 | -1/+1 | |
| 2013-02-20 | Implement MongoDB storage class stub | Julien Chaumond | 1 | -0/+247 | |
| 2013-02-20 | Remove redundancy in setUser example implementation | Julien Chaumond | 1 | -1/+1 | |
| 2013-02-03 | adding HttpBasic client assertion type | Brent Shaffer | 1 | -0/+87 | |
| 2013-02-03 | adds HttpBasic ClientAssertionType, refactors GrantController to match this | Brent Shaffer | 4 | -95/+29 | |
| 2013-02-02 | fixes #63 - updates all drafts to RFCs where applicable | Brent Shaffer | 17 | -38/+38 | |
 |
index : OAuth2/oauth2-server-php.git | |
| A library for implementing an OAuth2 Server in php (mirror) | Andrey V.Kosteltsev |
| summaryrefslogtreecommitdiff |