ElyBy-Mirror/oauth2-server
1
0
Fork 0
mirror of https://github.com/elyby/oauth2-server.git synced 2024-12-11 15:58:58 +05:30
Code Issues Packages Projects Releases Wiki Activity
2,266 Commits 11 Branches 86 Tags 15 MiB
972808561d
Commit Graph

2266 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Andrew Millington
c9b07f386c Fix StyleCI issues and remove phpdoc order from StyleCI 2018-02-28 20:01:01 +00:00
Andrew Millington
00a7972f74 Merge remote-tracking branch 'upstream/master' 2018-02-28 19:45:41 +00:00
Andrew Millington
e3266cb50a
Fix changelog categorisation 2018-02-26 20:08:02 +00:00
Andrew Millington
2fdd6ce494
Add change for access and refresh token emitters 2018-02-26 20:07:02 +00:00
Andrew Millington
6fd3024c48
Merge pull request #860 from Zaszczyk/new-events-to-emitter-#825 
Add new event types: access_token_issued and refresh_token_issued.
 2018-02-26 20:01:22 +00:00
Andrew Millington
62e06b7d3a
Removing Yoda condition 
Removed Yoda condition from code base
 2018-02-26 19:51:03 +00:00
Simon Hamp
009c109716 TravisCI fix for PHPStan 2018-02-26 16:04:48 +00:00
Simon Hamp
6723aadfe8 Fix #837 
Unifies how we fetch the client_id from the request and allows us to throw a more appropriate exception when the client_id parameter is missing.

Improves the test method for this validation by checking the culpable method in this particular case. The test was missing this by calling the wrong method.
 2018-02-26 15:56:28 +00:00
Andrew Millington
e24964af07
Update changelog 
Add removal of paragone/random_compat to changelog
 2018-02-26 12:57:11 +00:00
Andrew Millington
99e42f6f25
Remove paragonie/random_compat 
Removing paragonie/random_compat as no longer supporting PHP 5.x branches
 2018-02-26 12:38:31 +00:00
Mateusz Błaszczyk
6700b113a8 Add new event types: access_token_issued and refresh_token_issued. 2018-02-23 17:48:51 +01:00
Andrew Millington
28e1418f64
Change to use correct release date for version 7 2018-02-18 20:29:37 +00:00
Lukáš Unger
143afc9561
PHPStan level 7 2018-02-18 21:20:48 +01:00
Andrew Millington
456c6cfdd2
Merge pull request #854 from Sephster/master 
Version 7
 2018-02-18 15:57:10 +00:00
Andrew Millington
4f68d2a5f2
Fix release tags in changelog 2018-02-18 15:51:41 +00:00
Andrew Millington
49f66866f7
Fix links for versions 6.0.1 - 6.0.2 2018-02-18 15:38:28 +00:00
Andrew Millington
028d91f670
Add code coverage for scrutinizer 2018-02-18 15:33:41 +00:00
Andrew Millington
9287f587fc
Update changelog link 2018-02-18 15:29:59 +00:00
Andrew Millington
70396bec67
Chang Changelog format 2018-02-18 15:28:28 +00:00
Andrew Millington
6679418436
Update readme and changelog 2018-02-18 14:20:37 +00:00
Andrew Millington
e04b8f4e6d
Merge pull request #744 from erickjth/fix-pkce-implementation 
Fix PKCE implementation with strict verifications
 2018-02-18 14:10:08 +00:00
Andrew Millington
e0cc5ee1b0
Merge branch 'master' of https://github.com/thephpleague/oauth2-server into fix-pkce-implementation 2018-02-18 13:57:19 +00:00
Andrew Millington
b78c012796
Change code challenge and verifier to be constants in test 2018-02-18 13:51:34 +00:00
Andrew Millington
bcd2fc38c0
Merge pull request #853 from thephpleague/analysis-zGNlb2 
Apply fixes from StyleCI
 2018-02-17 20:02:03 +00:00
Andrew Millington
25c3c216a0 Apply fixes from StyleCI 2018-02-17 19:31:59 +00:00
Andrew Millington
8bbb20a012
Merge pull request #852 from lookyman/updated-dependencies 
Updated dependencies, more strict static analysis
 2018-02-17 17:27:58 +00:00
Lukáš Unger
cd5233392e
Updated dependencies, more strict static analysis 2018-02-17 18:07:16 +01:00
Andrew Millington
7a6c35bc29
Merge pull request #849 from lookyman/phpunit-version 
Update PHPUnit, run static analysis on tests
 2018-02-17 16:28:41 +00:00
Andrew Millington
8614aea887
Revert "Remove temp variables and @var comments" 
This reverts commit 7a5c511807.
 2018-02-17 16:27:41 +00:00
Andrew Millington
7a5c511807
Remove temp variables and @var comments 2018-02-17 16:15:48 +00:00
Andrew Millington
e0b65a2831
Set default mustValidateSecret to true 2018-02-17 11:46:47 +00:00
Andrew Millington
ee7d52ecaa
Merge pull request #607 from lucadegasperi/patch-5 
Make ClientRepositoryInterface more flexible
 2018-02-17 11:42:48 +00:00
Alex Bilbie
7d1d88cdf1
Merge pull request #850 from weirdan/patch-1 
Fixed docblock opener
 2018-02-12 10:54:26 +00:00
Bruce Weirdan
80a949601f Fixed docblock opener 
It's important for tools relying on docblock types to perform static analysis (think phan, phpstan, psalm, etc)
 2018-02-12 12:36:59 +02:00
Andrew Millington
fea577f25b
Merge pull request #719 from stratoss/stratoss-patch-exeption 
Getter and setter for the payload and ability to pass options to json_encode
 2018-02-11 22:48:23 +00:00
Lukáš Unger
1f87c7a7be
Update PHPUnit, run static analysis on tests 2018-02-11 23:22:46 +01:00
Andrew Millington
3098f6d7fa
Merge pull request #839 from simesy/master 
Allow other secure key permissions.
 2018-02-11 22:17:35 +00:00
Andrew Millington
06a23a1dd0
Update CryptKey.php 
Change the error message to reflect that the server will also accept 440 and 400 as a valid file permission
 2018-02-11 22:12:55 +00:00
Alex Bilbie
97089ad49e
Merge pull request #848 from lookyman/static-analysis 
Static analysis with PHPStan
 2018-02-11 21:24:52 +00:00
Lukáš Unger
eca385ab08
Static analysis with PHPStan 2018-02-11 22:20:17 +01:00
Andrew Millington
ef06c29ee8
Merge pull request #840 from liverbool/master 
BUGFIX: Wrong redirect uri.
 2018-02-11 20:20:41 +00:00
Andrew Millington
5fb9fc929a Reinstate check on client redirect URI to fail if multiple redirect URIs have been listed for the client and one has not been specified in the auth request 2018-02-11 20:10:01 +00:00
Andrew Millington
4c548dbd78
Merge pull request #847 from Sephster/master 
Minor Coding Standard Fixes
 2018-02-11 19:01:12 +00:00
liverbool
b3cd73cac7 code cleaner 
cc.

Co-Authored-By: Andrew Millington <sephster@users.noreply.github.com>
 2018-02-09 05:54:05 +07:00
Andrew Millington
3999c41fef
Merge pull request #845 from kpn13/master 
Do not create key file if it already exists and it is the same
 2018-02-06 12:32:29 +00:00
Erick Torres
ce2662ece7 Merge branch 'master' of github.com:thephpleague/oauth2-server into fix-pkce-implementation 
# Conflicts:
#	tests/Grant/AuthCodeGrantTest.php
 2018-02-05 15:32:15 -05:00
Karim PINCHON
d2641b560d Do not create key file if it already exists and it is the same 2018-01-29 11:05:10 +01:00
Andrew Millington
8bbd218856
Merge pull request #842 from sgomez/fix-challenge-pkce 
Fix S256 code challenge method
 2018-01-25 23:16:15 +00:00
Andrew Millington
eb9cde5ab7
Merge pull request #805 from raarts/Accept-RSA-key-with-crlf-v2 
Also accept an RSA key with crlf
 2018-01-23 22:24:52 +00:00
Sergio Gómez
1b692e2298 Fix S256 code challenge method 
According to [RFC7636#section-4.3](https://tools.ietf.org/html/rfc7636#section-4.3):

    If the "code_challenge_method" from Section 4.3 was "S256", the
    received "code_verifier" is hashed by SHA-256, base64url-encoded, and
    then compared to the "code_challenge", i.e.:

    BASE64URL-ENCODE(SHA256(ASCII(code_verifier))) == code_challenge

So, the hash must be done before the base64_encode.

The tests are modified to use example data from the
[RFC7636#appendix-B](https://tools.ietf.org/html/rfc7636#appendix-B).
 2018-01-18 05:31:44 +01:00