Guy Huynh
491f3f0e95
less restrictive on Authorization header check
2016-09-08 10:20:34 -04:00
Matt Humphrey
c71dc47459
Added priority argument
2015-10-13 11:16:49 +01:00
Alex Bilbie
f19189a999
Merge pull request #345 from mpipet/master
...
Expose parameter passed to exceptions
2015-09-04 08:38:35 +01:00
Alex Bilbie
c3457107ee
Merge pull request #370 from michaelhogg/fix-bug-hmac-encoding
...
Fix bug: hash_hmac() should output raw binary data, not hexits
2015-09-04 08:36:33 +01:00
Alex Bilbie
a9f61fd3ed
Merge pull request #377 from starJammer/master
...
AuthCodeGrant and RefreshTokenGrant don't require client_secret
2015-09-04 08:29:39 +01:00
Alex Bilbie
b78d8ca1d8
Merge pull request #364 from apollopy/master
...
Too idealistic. Should allow the client and server have some time difference.
2015-09-04 08:28:14 +01:00
Jerry Saravia
d88e01c7dd
Making client secret optional during refresh and access token requsets.
2015-09-03 22:50:35 -04:00
Michael Hogg
d21374fb0b
Merge remote-tracking branch 'thephpleague/master' into fix-bug-hmac-encoding
2015-09-02 09:50:46 +01:00
Alex Bilbie
31e5f4d33c
Merge pull request #368 from apollopy/mac_token_only_header
...
Mac token only get to header
2015-09-01 14:33:58 +01:00
Alex Bilbie
a773405adf
Merge pull request #369 from joaopramos/mac-refresh-tokens
...
Mac refresh tokens
2015-09-01 14:32:45 +01:00
Alex Bilbie
ccc845b195
Merge pull request #371 from michaelhogg/fix-bug-base64-regex
...
Fix bug: regex doesn't match all Base64 characters
2015-09-01 14:30:38 +01:00
Michael Hogg
a2c418ee07
Fix bug: incorrect signature parameter
2015-08-28 16:41:12 +01:00
Michael Hogg
b220368583
Fix bug: regex doesn't match all Base64 characters
2015-08-28 14:01:22 +01:00
Michael Hogg
eeaa68400f
Fix bug: hash_hmac() should output raw binary data, not hexits
2015-08-28 12:46:53 +01:00
joao
56c73d2427
ISSUE #356 : added the refresh token to the mac token type response
2015-08-28 10:40:13 +00:00
joao
f632fcc997
ISSUE #356 : added the refresh token to the mac token type response
2015-08-28 10:38:45 +00:00
ApolloPY
618d84ddcf
Mac token only get to header
2015-08-22 01:47:59 +08:00
apollopy
ace42e89e0
change to 300 seconds
2015-08-21 20:02:42 +08:00
ApolloPY
c496df98e4
Too idealistic. Should allow the client and server have some time difference.
2015-08-21 17:17:51 +08:00
Alex Bilbie
2496653968
Merge pull request #342 from gaomd/master
...
Fix #328 , strict check Bearer token
2015-08-21 09:00:02 +01:00
DavidBlake
726d879607
Fix typo in docblock
2015-06-18 13:27:58 +01:00
Mathieu Pipet
b256195421
Expose parameter passed to exceptions
2015-06-09 17:42:25 +02:00
Mathieu Pipet
c84ea1ea62
Expose parameter passed to exceptions
2015-06-09 17:30:13 +02:00
Mengdi Gao
7934c7bb53
Fix #328 , strict check Bearer token
2015-06-01 21:36:44 +08:00
Jake A. Smith
430a752315
Just a typo fix
2015-04-16 10:41:37 -05:00
Alex Bilbie
51184259d1
Merge pull request #323 from rdohms/interface-docs
...
Updated Interface Docs
2015-03-20 11:43:47 +00:00
rdohms
b21de11429
Updated Interface Docs
...
Made phpdocs match expectations like null when not found and using array notation for indicating array of <object>
2015-03-20 11:33:03 +01:00
Norbert Fuksz
7f7f45662a
Fixed missing session scope
...
Close #297
2015-03-02 17:47:48 +00:00
Ismail BASKIN
3869b8f406
typo
2015-02-10 10:28:57 +02:00
Hannes Van De Vreken
dd795a82f4
Changed the order and added missing throws
2015-01-23 11:21:12 +01:00
Hannes Van De Vreken
166362d3cd
Boyscouting the php docs to always use FQCNs
2015-01-23 11:17:19 +01:00
Scott Arciszewski
612775466c
Remove side-effects in hash_equals()
...
This is functionally identical, but without the side-effect of defining a function in the current namespace.
Also, it uses absolute function reference (`\hash_equals` instead of `hash_equals`) because if someone defined `League\OAuth2\Server\TokenType\hash_equals()` elsewhere, it would try that first.
Kudos for using `hash_equals()` in your original design for this feature. Many OAuth2 implementations neglect this nuance :)
2015-01-01 01:34:22 -05:00
Alex Bilbie
282bb20cc8
Fix docblocks + method name
2014-12-27 23:00:11 +00:00
Alex Bilbie
b727be55a2
Merge branch 'master' of https://github.com/Symplicity/oauth2-server into Symplicity-master
2014-12-27 22:57:08 +00:00
Alex Bilbie
72a5c1794a
Remove unused namespace
2014-12-27 22:50:13 +00:00
Alex Bilbie
707c85b0d6
Fixes and tests
2014-12-27 22:26:31 +00:00
Alex Bilbie
c56562b0b8
PSR fixes
2014-12-27 21:38:01 +00:00
Alex Bilbie
17be6f4549
Added MacTokenInterface
2014-12-27 21:35:45 +00:00
Alex Bilbie
b50fbff1e3
Update docblock
2014-12-27 21:35:45 +00:00
Alex Bilbie
7375a348c6
PHP code fix
2014-12-27 21:35:45 +00:00
Alex Bilbie
ae5dd9ce65
Added MAC TokenType
2014-12-27 21:35:45 +00:00
Alex Bilbie
f9e56ff62a
Added MAC storage getter and setter
2014-12-27 21:35:45 +00:00
Dave Walker
851c7c0eb1
Per the spec:
...
The authorization server MAY issue a new refresh token, in which case
the client MUST discard the old refresh token and replace it with the
new refresh token. The authorization server MAY revoke the old
refresh token after issuing a new refresh token to the client. If a
new refresh token is issued, the refresh token scope MUST be
identical to that of the refresh token included by the client in the
request.
This commit allows users to specifiy the time before the Refresh Token
expire time to issue a new Refresh Token.
alter method names, naming convention(?)
2014-12-21 18:51:52 -05:00
mortenhauberg
60bd334b46
Changed "paremter" to "parameter"
2014-12-16 19:04:03 +01:00
Regan
d32bfaa757
Prevent duplicate session in auth code grant
...
The session already exists in the database, so we don't need to save it again. Doing so results in the session used for the auth code hanging around in the database with nothing associated to it, while the access token is associated to a new session caused by the `save()` method creating a duplicate. Fixes #266 .
2014-12-15 15:09:36 +13:00
Graham Campbell
a12786cbd5
Removed an extra new line
2014-12-10 15:18:49 +00:00
Graham Campbell
a1726903b5
CS fixes
2014-12-10 13:10:35 +00:00
Ivan Enderlin
3b176fe220
Fix API CS.
2014-12-09 14:40:39 +01:00
Ivan Enderlin
986dc59627
The create method returns void.
2014-12-09 14:40:39 +01:00
Ivan Enderlin
0878897969
Fix API CS.
2014-12-09 14:15:36 +01:00
