summaryrefslogtreecommitdiff
path: root/test
AgeCommit message (Collapse)AuthorFilesLines
2013-12-17adds refresh token configuration to Server classBrent Shaffer1-0/+29
2013-12-14Merge pull request #268 from F21/implement-jtiBrent Shaffer2-1/+61
Implement jti for JWT Bearer tokens to prevent replay attacks.
2013-12-03Formatting.F211-1/+1
2013-12-02runs php-cs-fixer on everything for code standards and whitespace fixingBrent Shaffer12-7/+32
2013-11-30Implement jti for JWT Bearer tokens to prevent replay attacks.F212-1/+61
2013-11-27adds automatic setting of user_id to the ClientCredentials grantBrent Shaffer4-2/+30
2013-11-27adds setClientCredentials convenience methods for all Storage typesBrent Shaffer1-0/+19
2013-09-25refactors public key logic to be more intuitiveBrent Shaffer7-24/+95
2013-09-23cleans up server creation in tests, adds docs, makes storing the token ↵Brent Shaffer1-5/+3
string the default
2013-09-23adds tests for secondary storage and cleans up JWT testsBrent Shaffer4-73/+65
2013-09-23fixes CryptoToken tests by allowing 'algorithm' config argumentBrent Shaffer2-20/+95
2013-09-21fixes storage test namesBrent Shaffer2-2/+2
2013-09-21adds support for JSON crypto tokensBrent Shaffer4-17/+112
2013-09-21fixes tests - adds null option for storage in UserCredentialsTestBrent Shaffer1-1/+1
2013-09-21refactors Storage tests - breaks them out into interface tests for each ↵Brent Shaffer9-355/+391
storage type
2013-09-08Remove unused columns in oauth_clientsdsquier1-1/+1
These are no longer needed with the last scope storage change.
2013-09-08fixes #215 - makes Redis Scope Storage obey the same paradigm as PDOBrent Shaffer4-19/+70
2013-09-08fixes #228 - removes scope group - we don't want this implementation logic, ↵Brent Shaffer2-15/+20
comeon people
2013-09-05better support for scopes in PDOBrent Shaffer2-23/+34
2013-08-23Implement ScopeInterface for PDO, Redisdsquier3-2/+63
* Added tests and supporting data for Memory, PDO, Redis
2013-08-12fixes unnecessary BC breaking changes made by 69ba3a2v1.0Brent Shaffer1-5/+5
2013-08-11fixes getUserCredentials by standardizing on 'user_id' for all fieldsBrent Shaffer5-18/+28
2013-07-31Add unit testing and apply fix to checkRestricted method of Redis storageTrent Petersen1-0/+1
2013-07-31Add test for storage check restricted grant typeTrent Petersen2-4/+21
2013-07-29fixes #197 - adds support for 'false' default scope in Token controllerBrent Shaffer1-1/+27
2013-07-24fixes #192 - reference errors and adds testsBrent Shaffer3-0/+20
2013-07-16fixes #191 - passes config to HttpBasicBrent Shaffer1-0/+16
2013-07-13Merge pull request #171 from davidkuridza/fix-redirect-in-authorization-flowBrent Shaffer1-1/+2
Fix wrong redirect following authorization step
2013-07-08Added another assertion for ScopeTest.F211-0/+1
2013-07-08client_id is now passed to getDefaultScope().F212-0/+11
2013-07-06Add unit test to check redirect_uri value, refs #171, refs #163David Kuridža1-1/+2
2013-06-23better tests for 302 redirects - ensures errors are not includedBrent Shaffer1-18/+17
2013-06-23fixes #163 - only saves submitted redirect_uris to the authorization code, ↵Brent Shaffer1-0/+34
so no redirect_uri is properly handled in token controller. AuthorizeController->validateRequest now returns a boolean instead of params array. Parameters can be accessed using the new class getter functions
2013-06-11fixes tests for e367a02d6ccb0abfd886eefffc88f98e5c8812a8Brent Shaffer1-3/+3
2013-06-06Rename JwtBearerTest.php to JWTBearerTest.phpBrent Shaffer1-0/+0
woops wrong branch
2013-06-06removes check for 5.2Brent Shaffer1-5/+0
2013-06-06moves interfaces into namespaced classesBrent Shaffer1-2/+2
2013-06-02Rename JWTBearerTest.php to JwtBearerTest.phpBrent Shaffer1-0/+0
2013-06-02converts all classes to namespacesBrent Shaffer20-370/+483
2013-06-01standardizes error messages by removing period on scope and redirect errorsBrent Shaffer6-8/+8
2013-06-01fixes #134 - allows for client_secret to be empty in post body if the client ↵Brent Shaffer2-1/+24
secret is an empty string
2013-05-30addresses #143 - adds WWW-Authenticate to 400 responses, removes error codes ↵Brent Shaffer1-3/+3
from invalid requests
2013-05-30addresses #145 - fixes status code for insufficient_scope requestsBrent Shaffer1-1/+6
2013-05-30refactors controller testsBrent Shaffer5-126/+111
2013-05-29fixes #144 - correct mimeType parsing in headerBrent Shaffer1-0/+31
2013-05-28standardizes tests - uses arrays instead of setting query directly in ↵Brent Shaffer4-108/+131
Controller tests
2013-05-28** BC-BREAKING CHANGE ** - addresses #80: hardens default security by making ↵Brent Shaffer4-2/+34
'enforce_state' param in AuthorizationServer true by default
2013-05-28** BC-BREAKING CHANGE ** - addresses #80: requires exact matching of URL by ↵Brent Shaffer1-3/+18
default, rather than only matching the beginning string
2013-05-28cleans up redirect URI validationBrent Shaffer2-1/+52
2013-05-26fixes #27 - adds way to pass in custom clientassertiontype to server objectBrent Shaffer1-1/+25
generated by cgit v1.2.3 (git 2.39.0) at 2026-11-12 00:56:30 +0300