summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)AuthorFilesLines
2013-08-12fixes unnecessary BC breaking changes made by 69ba3a2v1.0Brent Shaffer3-22/+37
2013-08-11fixes getUserCredentials by standardizing on 'user_id' for all fieldsBrent Shaffer4-35/+67
2013-08-11Merge pull request #203 from ademarre/201-configure-redir-codeBrent Shaffer1-10/+12
Add redirect_status_code config param for AuthorizeController
2013-08-11Merge branch 'develop' of https://github.com/bshaffer/oauth2-server-php into ↵Brent Shaffer3-3/+7
develop
2013-08-11fixes #205 - ensures unnecessary ? is not set when query is emptyBrent Shaffer1-1/+1
2013-08-04Fixed call to LogicExceptionBartosz Gałuszka1-1/+1
2013-08-01Add redirect_status_code config param for AuthorizeControllerAndre DeMarre1-10/+12
2013-07-31Add unit testing and apply fix to checkRestricted method of Redis storageTrent Petersen1-1/+3
2013-07-31Merge branch 'develop' of https://github.com/bshaffer/oauth2-server-php into ↵Trent Petersen1-1/+8
issue-200
2013-07-31Add explode to checkRestrictedGrant in PDO StorageTrent Petersen1-1/+3
2013-07-29fixes #197 - adds support for 'false' default scope in Token controllerBrent Shaffer1-1/+8
2013-07-24fixes #192 - reference errors and adds testsBrent Shaffer3-3/+5
2013-07-24fix undefined classes.Yuichi Shiwaku6-8/+8
2013-07-24fixes #194 - makes some appropriate properties protected instead of privateBrent Shaffer11-30/+33
2013-07-16fixes #191 - passes config to HttpBasicBrent Shaffer1-1/+3
2013-07-15fixes #190 - validates client credentials before grant typeBrent Shaffer1-6/+14
2013-07-13Merge pull request #171 from davidkuridza/fix-redirect-in-authorization-flowBrent Shaffer1-1/+13
Fix wrong redirect following authorization step
2013-07-08client_id is now passed to getDefaultScope().F215-7/+14
2013-07-06Fix wrong redirect following authorization step, refs #171David Kuridža1-1/+13
Fix for #163 (https://github.com/bshaffer/oauth2-server-php/issues/163) allowed authorize flow to handle `redirect_uri` as an optional parameter. The change resulted in user not being redirected back to the client after granting or denying client's access. This fix verifies whether `redirect_uri` is set or not in `OAuth2\Controller\AuthorizeController`'s `handleAuthorizeRequest()` method. If it's not set, it grabs the client's registered value. If/When support for PHP 5.3 is dropped, the code can be modified to `$this->clientStorage->getClientDetails($this->client_id)['redirect_uri']`.
2013-07-04Update Mongo.phpBrent Shaffer1-3/+4
Fixes #185 - mongo credentials check
2013-07-03Update Redis.phpBrent Shaffer1-1/+1
Fixes #180 - case correction for JWTBearerInterface
2013-06-29Merge pull request #176 from trickleup/developBrent Shaffer1-0/+1
Require refresh_token in getRefreshToken response
2013-06-29Require refresh_token in getRefreshToken responseJohan Genberg1-1/+1
Added "identifier" to description.
2013-06-29Require refresh_token in getRefreshToken responseJohan Genberg1-0/+1
2013-06-28Merge pull request #174 from trickleup/developBrent Shaffer1-1/+1
make user_id not required for refresh_token grant
2013-06-28make user_id not required for refresh_token grantJohan Genberg1-1/+1
2013-06-28Duplication in JwtBearer GrantTrent Petersen1-5/+0
Corrects duplicate check in the validateRequest method found in #172
2013-06-28user_id not required for authorization_code grantJohan Genberg1-1/+1
2013-06-23addresses #133 - hardens default security for user objectsBrent Shaffer1-1/+4
2013-06-23fixes #162 - adds getToken on ResourceController for convenienceBrent Shaffer1-0/+10
2013-06-23fixes #163 - only saves submitted redirect_uris to the authorization code, ↵Brent Shaffer1-8/+60
so no redirect_uri is properly handled in token controller. AuthorizeController->validateRequest now returns a boolean instead of params array. Parameters can be accessed using the new class getter functions
2013-06-23cleans up stupid rhetoric in commentBrent Shaffer1-1/+1
2013-06-13adds namespace back - seriously, don't merge from php 5.2Brent Shaffer1-0/+2
2013-06-13fixes bug in class name- don't merge from php5.2 branch anymore..Brent Shaffer1-1/+1
2013-06-13addresses #156 - documents required user_id for authcodesBrent Shaffer1-3/+2
2013-06-13Fix for extending access and refresh tokensMiha Hribar1-2/+2
2013-06-11fixes #154 - adds getParameter to OAuth2_ResponseInterfaceBrent Shaffer1-0/+2
2013-06-11ensures invalid_token is returned according to ↵Brent Shaffer1-3/+3
http://tools.ietf.org/html/rfc6750#section-3.1
2013-06-06moves interfaces into namespaced classesBrent Shaffer17-24/+23
2013-06-05allows response to be null on Server methodsBrent Shaffer1-6/+6
2013-06-02Rename JWTBearerInterface.php to JwtBearerInterface.phpBrent Shaffer1-0/+0
2013-06-02Rename JWTBearer.php to JwtBearer.phpBrent Shaffer1-0/+0
2013-06-02Rename JWT.php to Jwt.phpBrent Shaffer1-0/+0
2013-06-02converts all classes to namespacesBrent Shaffer44-217/+396
2013-06-01standardizes error messages by removing period on scope and redirect errorsBrent Shaffer2-2/+2
2013-06-01fixes #134 - allows for client_secret to be empty in post body if the client ↵Brent Shaffer1-2/+6
secret is an empty string
2013-06-01adds convenience getters/setters onto the server class (for real)Brent Shaffer1-0/+50
2013-06-01adds convenience getters/setters onto the server classBrent Shaffer1-1/+2
2013-05-30removes unnecessary issetBrent Shaffer1-1/+1
2013-05-30addresses #143 - adds WWW-Authenticate to 400 responses, removes error codes ↵Brent Shaffer2-23/+22
from invalid requests
generated by cgit v1.2.3 (git 2.39.0) at 2026-11-11 13:37:56 +0300