summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'master' into oidc-reqval-duplicateoidc-reqval-duplicateJonathan Huot2019-03-041-1/+1
|\
| * Merge pull request #659 from jdufresne/isinstanceJonathan Huot2019-03-041-1/+1
| |\ | | | | | | Combine multiple isinstance() calls to one
| | * Combine multiple isinstance() calls to oneJon Dufresne2019-03-021-1/+1
| |/
* | Fixed missing references in unittestsJonathan Huot2019-02-283-5/+5
| |
* | Removed duplicated OIDC members in OAuth2.RequestValidatorJonathan Huot2019-02-283-184/+5
|/
* Merge pull request #656 from oauthlib/oidc-nonceJonathan Huot2019-02-286-61/+167
|\ | | | | OIDC: Raise error=invalid_request when nonce is mandatory
| * Merge branch 'master' into oidc-nonceoidc-nonceJonathan Huot2019-02-272-2/+2
| |\ | |/ |/|
* | Merge pull request #655 from oauthlib/3.0.2-initJonathan Huot2019-02-262-2/+2
|\ \ | | | | | | Change to 3.0.2-dev as long as master is in "dev"
| * \ Merge branch 'master' into 3.0.2-init3.0.2-initJonathan Huot2019-02-261-1/+1
| |\ \ | |/ / |/| |
| * | Change to 3.0.2-dev as long as master is in "dev"Jonathan Huot2019-02-252-2/+2
| | |
| | * Merge branch 'master' into oidc-nonceJonathan Huot2019-02-261-1/+1
| | |\ | |_|/ |/| |
* | | Merge pull request #657 from oauthlib/travis-coverallsJonathan Huot2019-02-261-1/+1
|\ \ \ | |/ / |/| | Notifications must be sent for every build
| * | Notifications must be sent for every buildtravis-coverallsJonathan Huot2019-02-251-1/+1
|/ / | | | | I hope fixing the longstanding issue mentionned at https://github.com/oauthlib/oauthlib/issues/582.
| * Added missing import after test movedJonathan Huot2019-02-251-2/+5
| |
| * Move HybridGrant test into its respective file.Jonathan Huot2019-02-252-75/+76
| |
| * Add nonce mandatory check for "id_token" response_typeJonathan Huot2019-02-251-0/+21
| |
| * Add nonce auth request check for authorization_codeJonathan Huot2019-02-251-0/+14
| |
| * OIDC: Raise error=invalid_request when nonce is mandatoryJonathan Huot2019-02-254-32/+99
|/ | | | Until now, only OIDC implicit was raising an error, but OIDC hybrid contain a couple of mandatory nonce, too.
* Merge pull request #651 from hoylen/fix-uri-normalizationJonathan Huot2019-02-254-31/+71
|\ | | | | Fixed space encoding in base string URI used in the signature base st…
| * Merge branch 'master' into fix-uri-normalizationJonathan Huot2019-02-253-11/+4
| |\ | |/ |/|
* | Merge pull request #654 from oauthlib/652-token_stateJonathan Huot2019-02-253-11/+4
|\ \ | | | | | | Remove usage of "state" for code/token response.
| * \ Merge branch 'master' into 652-token_state652-token_stateJonathan Huot2019-02-220-0/+0
| |\ \ | |/ / |/| |
| * | Remove usage of "state" for code/token response.Jonathan Huot2019-02-223-11/+4
| | |
| | * Renamed construct_base_string to signature_base_string.Hoylen Sue2019-02-223-16/+21
| | |
| | * Renamed normalize_base_string_uri to base_string_uri.Hoylen Sue2019-02-211-2/+1
| | |
| | * Merge branch 'master' into fix-uri-normalizationJonathan Huot2019-02-2113-52/+72
| | |\ | |_|/ |/| |
* | | Merge pull request #653 from oauthlib/652-token_stateJonathan Huot2019-02-2113-50/+70
|\ \ \ | |/ / | | | Fix 652: removed "state" from /token response.
| * | Removed useless set_state internal functionJonathan Huot2019-02-211-7/+1
| | | | | | | | | | | | Does not have purpose for /token request
| * | Add authorization "state" preservation back for AuthCodeJonathan Huot2019-02-211-0/+7
| | |
| * | Add clarity to the deprecation warningJonathan Huot2019-02-211-2/+2
| | |
| * | Fix 652: removed "state" from /token response.Jonathan Huot2019-02-2013-49/+68
|/ / | | | | | | | | | | Fix OIDC /token flow where &state=None was always returned, and fix OAuth2.0 /token flow where &state=foobar was returned if &state=foobar was present in the token request. Remove "save_token" from create_token() signature cuz it was not used internally. Deprecated the option to let upstream libraries have a chance to remove it, if ever used.
* | Merge pull request #648 from JonathanHuot/masterJonathan Huot2019-02-191-0/+4
|\ \ | | | | | | Add 3.0.1 changelog
| * \ Merge branch 'master' into masterJonathan Huot2019-02-191-13/+22
| |\ \ | |/ / |/| |
| * | Add 3.0.1 changelogJonathan Huot2019-01-311-0/+4
| | |
| | * Fixed space encoding in base string URI used in the signature base string.Hoylen Sue2019-02-193-15/+55
| |/ |/|
* | Merge pull request #647 from duaneking/masterDuane King2019-02-021-13/+22
|\ \ | |/ |/| PEP8
| * pep8 and docsDuane King2019-01-241-13/+22
| |
| * Merge pull request #1 from oauthlib/masterDuane King2019-01-24141-1593/+5545
| |\ | |/ |/| Merge Main into personal dev branch.
* | Bump to 3.0.1v3.0.1Jonathan Huot2019-01-241-1/+1
| |
* | Fix 644, Add tests for BasicAuth credentials for all endpoints (#645)Jonathan Huot2019-01-114-10/+65
| | | | | | Test Introspect, Revoke, Token (web, legacy, backend) endpoints with authenticate_client and HTTP Basic Auth.
* | Fixed graphviz/dot graph & improved clarity (#642)Jonathan Huot2019-01-082-27/+80
| | | | | | | | | | | | I fixed graphviz missing output to web responses (see image of https://github.com/oauthlib/oauthlib/pull/639), and I have added a fixed rank (`rank=same`) when functions are achieving an identical goal. E.g. `validate_client_id`, `validate_user`, `validate_bearer_token` are unique for each flows, or, e.g. `confirm_redirect_uri`, `validate_redirect_uri` together, and so on. ![graphviz-0cc58e8637b94d7402eda45a1fef6e68889bd8e1](https://user-images.githubusercontent.com/820496/50830407-042ad600-1348-11e9-936a-03d07f42494f.png)
* | Merge pull request #639 from oauthlib/3-releasev3.0.0Jonathan Huot2019-01-078-17/+320
|\ \ | | | | | | 3.0.0 ChangeLog release
| * | Add Breaking Changes section & split Bugfixes3-releaseJonathan Huot2019-01-071-6/+9
| | |
| * | Replace latest occurences of Gazit w/ new communityJonathan Huot2018-12-281-3/+3
| | |
| * | Bump to 2019Jonathan Huot2018-12-283-3/+3
| | |
| * | Update Changelog to 3.0.0Jonathan Huot2018-12-282-3/+41
| | |
| * | Add OAuth2 Provider oauthlib-flowJonathan Huot2018-12-285-9/+271
|/ /
* | Fix invalid escape sequence in tests (#637)Jon Dufresne2018-12-271-1/+1
| | | | | | | | | | | | | | | | | | Fixes warning when running tests: ``` tests/oauth1/rfc5849/endpoints/test_base.py:63 oauthlib/tests/oauth1/rfc5849/endpoints/test_base.py:63: DeprecationWarning: invalid escape sequence \d headers['Authorization'] = sub('timestamp="\d*k?"', ```
* | Pass python_requires argument to setuptools (#636)Jon Dufresne2018-12-271-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Helps pip decide what version of the library to install. https://packaging.python.org/guides/distributing-packages-using-setuptools/#python-requires > If your project only runs on certain Python versions, setting the > python_requires argument to the appropriate PEP 440 version specifier > string will prevent pip from installing the project on other Python > versions. https://setuptools.readthedocs.io/en/latest/setuptools.html#new-and-changed-setup-keywords > python_requires > > A string corresponding to a version specifier (as defined in PEP 440) > for the Python version, used to specify the Requires-Python defined in > PEP 345.
* | Remove unused 'tests_require' from setup.py (#638)Jon Dufresne2018-12-261-5/+1
| | | | | | | | | | Neither used by Travis CI nor by tox.ini. The mock package was out of sync with requirements-tests.txt for Python 3 environments. Rather than maintain this duplicate, unused list of requirements just remove it.