summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)AuthorFilesLines
2013-05-26fixes #27 - adds way to pass in custom clientassertiontype to server objectBrent Shaffer1-11/+21
2013-05-25adds ability to pass headers explicitly to Request objectBrent Shaffer1-4/+5
2013-05-25fixes #137 - allows for multiple request_uris and adds tests for thisBrent Shaffer2-3/+17
2013-05-21fixes hardcoded error message in TokenController, adds test coverage for ↵Brent Shaffer1-1/+1
error case
2013-05-16standardizes doc blocksBrent Shaffer32-67/+153
2013-05-13fixes spacing issues (psr2)Brent Shaffer1-3/+2
2013-05-13Merge pull request #125 from F21/token_controller_client_id_scope_existsBrent Shaffer2-2/+13
TokenController now passes clientId into scopeExists().
2013-05-13TokenController now passes clientId into scopeExists(). Tests have beenF212-2/+13
added for this.
2013-05-13improves documentation for addStorage functionBrent Shaffer1-3/+10
2013-05-13fixes typehint for setAuthorizeControllerBrent Shaffer1-1/+1
2013-05-09rolling back OAuth2_Server fix due to php5.2 interface incompatibilitiesBrent Shaffer1-6/+6
2013-05-09better name for variables in AuthorizeControllerBrent Shaffer1-2/+2
2013-05-09adds defaults for OAuth2_Response objects back to the server classBrent Shaffer3-20/+27
2013-05-09cherry-picks redis class大兵2-1/+196
2013-05-09fixes fatal error and adds test to catch it next timeBrent Shaffer1-1/+1
2013-05-09allows for injection of tokenType into the server objectBrent Shaffer1-26/+24
2013-05-09** BC-BREAKING CHANGES ** - changes TokenController constructor so ↵Brent Shaffer2-11/+20
ClientAssertionType is now the third parameter instead of the first, and it no longer accepts Storage_ClientCredentials, but has to be ClientAssertionTypeInterface
2013-05-09adds 'createDefault' methods for all controllers - more accurate naming of ↵Brent Shaffer1-32/+47
functions
2013-05-09adds setters for controller classes, standardises order of the controller ↵Brent Shaffer1-85/+112
classes, moves protected methods to bottom
2013-05-09** BC-BREAKING CHANGE - accessTokenResponseType parameter in server class is ↵Brent Shaffer1-22/+18
redundant. This can be derived from the responseType parameter already passed in. Getting rid of it
2013-05-09updates readme and docblocks for response refactorBrent Shaffer3-5/+10
2013-05-09fixes variable namesBrent Shaffer1-2/+2
2013-05-06fixes php 5.2 issue with interfaces sharing method namesBrent Shaffer3-6/+29
2013-05-06cleans up ResponseInterfaceBrent Shaffer4-11/+12
2013-05-06BC-BREAKING CHANGE - Updates AuthorizeControllerInterface, ResponseInterfaceBrent Shaffer11-185/+45
2013-05-05BCBREAKING CHANGE - Updates to AuthorizeControllerInterface, ↵Brent Shaffer7-55/+41
ResourceControllerInterface, TokenTypeInterface
2013-05-05all GrantType tests passBrent Shaffer4-46/+57
2013-05-05BC BREAKING CHANGES - Refactors interfaces for GrantType, ↵Brent Shaffer11-249/+309
ClientAssertionType, and TokenController
2013-05-05moves private method to bottomBrent Shaffer1-44/+44
2013-05-05adds typehinting for getJWTDataBrent Shaffer1-1/+1
2013-05-05refactors scope validation and adds scope testing for all grant typesBrent Shaffer8-33/+45
2013-05-05addresses #88 - 'FromRequest' does not really make sense, as there are ↵Brent Shaffer9-13/+13
multiple places this data is stored
2013-05-05TokenController cleanupBrent Shaffer2-23/+25
2013-05-05addresses #113 - refactors grant types - they are much cleaner and intuitive nowBrent Shaffer8-227/+103
2013-04-29Update Server.phpBrent Shaffer1-4/+0
**BC-BREAKING CHANGE** - addresses #108 - removes default jwt granting, as "audience" is required. This needs to be set using `addGrantType` instead.
2013-04-29Merge pull request #112 from rjmackay/developBrent Shaffer3-22/+32
**BC-BREAKING CHANGE** - moves `checkRestrictedGrantType` from `ClientCredentialsInterface` to `ClientCredentialsInterface`. See #111 and #112
2013-04-29Merge pull request #109 from bojanz/unbounded_scopesBrent Shaffer5-38/+30
Better support for unbounded scopes.
2013-04-29Fix undefined index 'client_id' errors in OAuth2_Server_Authorize_* TestsRobbie Mackay1-2/+2
2013-04-29Move checkRestrictedGrantType() to ClientInterfaceRobbie Mackay3-20/+20
Make more sense to have checkRestrictedGrantType in ClientInterface instead of ClientCredentialsInterface as its not really anything to do with 'credentials'. Revert AuthorizeController $clientStorage parameter to ClientInterface
2013-04-29Check client's allowed grant types for authorize requests #111Robbie Mackay1-4/+14
Add checks for restricted grant type to Authorize Controller. Means that clients need 'implicit' grant type to use implicit flow, and clients that can't use auth code flow get bumped on the authorization step not the token step.
2013-04-29Better support for unbounded scopes.Bojan Zivanovic5-38/+30
2013-04-28Change Statuscode 400 to 405 if POST-Request is requiredsteffkes1-1/+2
As per http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.6 change the statuscode from 400 to 405 and include `Allow`-header indicating that POST must be used to grant an access token.
2013-04-24Update Pdo.phpBrent Shaffer1-2/+3
fixed #106
2013-04-20fixes #86 - makes http basic authentication POST check optional and removes ↵Brent Shaffer2-11/+16
GET check
2013-04-16User details must have a 'user_id' field, to store in token dataJulien Chaumond1-1/+4
2013-04-16Use spaces instead of tabs, to be consistent with the rest of the lib.Julien Chaumond1-237/+237
2013-04-16Make OAuth2_Storage_Mongo properties protectedJulien Chaumond1-2/+2
2013-04-16Fix MongoDB server stringJulien Chaumond1-1/+1
2013-04-06Merge pull request #89 from bojanz/fix-config-referencesBrent Shaffer1-2/+2
Fix incorrect references to config variables.
2013-04-04Merge pull request #95 from itsmrwave/developBrent Shaffer1-2/+2
Wrap realm & scope values in "" on 401 errors
generated by cgit v1.2.3 (git 2.39.0) at 2026-10-01 14:58:44 +0300