summaryrefslogtreecommitdiff
path: root/oauthlib
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'master' into dry-up-codedry-up-codeJonathan Huot2018-12-201-9/+33
|\
| * Merge branch 'master' into add-metadata-docJonathan Huot2018-12-167-18/+276
| |\
| * | Add OAuth2.0 Authorization Server Metadata documentationJonathan Huot2018-12-131-9/+33
| | |
* | | Fix typo.Omer Katz2018-12-173-3/+3
| | |
* | | Merge branch 'master' into dry-up-codeOmer Katz2018-12-1712-31/+318
|\ \ \ | | |/ | |/|
| * | Fixed OAuth2 Metadata when using PKCE and OIDC.Server601-pkce-supportJonathan Huot2018-12-141-1/+6
| | |
| * | Fix issue when using Metadata Endpoint with OIDC PreConfigured server.Jonathan Huot2018-12-141-2/+4
| | |
| * | Merge remote-tracking branch 'upstream/master' into 601-pkce-supportJonathan Huot2018-12-141-1/+3
| |\ \
| | * | Update comments regarding OAuth Request Body Hash. (#628)Omer Katz2018-12-131-1/+3
| | |/
| * | Fixed typoJonathan Huot2018-12-131-1/+1
| | |
| * | Merge branch 'master' into 601-pkce-supportJonathan Huot2018-12-1312-19/+57
| |\ \ | | |/
| | * Merge branch 'master' into 264-status401Jonathan Huot2018-12-135-6/+15
| | |\
| | * | Add Content-Type and Cache headers to introspect/revocation errorsJonathan Huot2018-12-132-7/+14
| | | |
| | * | Add double-quotes to the key/values in WWW-Authenticate264-status401Jonathan Huot2018-12-121-3/+3
| | | |
| | * | Used WWW-Authenticate and auth-param values as RFC6750 described it.Jonathan Huot2018-12-127-14/+27
| | | | | | | | | | | | | | | | It misses the possibility to add scope= and realm= at the moment, but it should be a step forward into the right direction.
| | * | Handle 401 with WWW-Authenticate. Moved wrong 401 into 400.Jonathan Huot2018-12-047-6/+15
| | | | | | | | | | | | | | | | access_denied/unauthorized_client/consent_required/login_required MUST be 400, and not 401. Also, 401 MUST have WWW-Authenticate when set. It could have an impact of processing those in webframeworks.
| * | | Add details on grant_type & implicit special case.Jonathan Huot2018-12-131-0/+12
| | | |
| * | | Replace temporary list by using clearer "extend" methodJonathan Huot2018-12-131-1/+1
| | | |
| * | | Merge pull request #624 from oauthlib/preconf-server-metadataJonathan Huot2018-12-111-3/+9
| |\ \ \ | | | | | | | | | | Preconf server metadata
| | * | | Add Server metadata test and fix metadata.Jonathan Huot2018-11-301-3/+9
| | | | | | | | | | | | | | | | | | | | Fix grant_types_supported which must include "implicit" even if it is not a grant_type in oauthlib sense. Removed internal "none" field value from the list of response_types.
| * | | | Merge branch 'master' into 601-pkce-supportJonathan Huot2018-12-111-1/+3
| |\ \ \ \ | | |/ / / | |/| / / | | |/ /
| * | | Add OAuth2 Provider Server Metadata for PKCE.Jonathan Huot2018-11-301-0/+2
| | | |
| * | | Initial OAuth2.0/PKCE Provider supportJonathan Huot2018-11-294-12/+241
| | | |
* | | | Extract raising on unsupported token.Omer Katz2018-12-173-11/+10
| | | |
* | | | Extract raising error on client auth failure.Omer Katz2018-12-173-21/+15
| | | |
* | | | Raise error on missing token.Omer Katz2018-12-173-9/+11
| | | |
* | | | Extract redirect handling to a common method.Omer Katz2018-12-173-70/+59
| | | |
* | | | Extract default grant headers to helper method.Omer Katz2018-12-175-21/+13
| |_|/ |/| |
* | | change: response_type as attributemlboy2018-12-121-1/+3
| | |
* | | change: grant_type as attributemlboy2018-12-121-1/+2
| | | | | | | | | use refresh_token_key as attribute
* | | change: grant_type as attributemlboy2018-12-121-1/+3
| | |
* | | change: grant_type as attributemlboy2018-12-121-1/+3
| | |
* | | change: grant_type as attributemlboy2018-12-121-2/+4
| |/ |/|
* | `invalid_scope` status code should be 400Benjamin Pereto2018-12-031-1/+3
|/
* Merge branch 'master' into 613-oidc-dispatcher613-oidc-dispatcherJonathan Huot2018-11-233-0/+195
|\
| * Allow custom provider to override oauthlib valuesoauth-metadataJonathan Huot2018-11-211-6/+8
| | | | | | | | See https://github.com/oauthlib/oauthlib/pull/605#discussion_r234438151
| * Merge branch 'master' into oauth-metadataOmer Katz2018-11-011-1/+1
| |\
| * | Initial OAuth Authorization Server Metadata RFC8414Jonathan Huot2018-10-253-0/+193
| | |
* | | Replaced distinct classes by a more unified one.Jonathan Huot2018-11-202-25/+30
| | | | | | | | | | | | "default_grant" and "oidc_grant" must be two generic attributes of OpenID Connect Dispatcher. We should not leave each Dispatcher implementation have this own attributes names.
* | | Import OIDC main classes identically than OAuth2Jonathan Huot2018-11-202-0/+20
| |/ |/| | | | | import oauthlib.oauth2.Server must be replaced with oauthlib.openid.Server
* | Wrong Client is also a FatalClientError (#608)Jonathan Huot2018-11-011-1/+1
|/ | | FatalClientError is it SHOULD NOT be redirected to client (redirect_uri), but MUST be redirected to USERS (error_uri).
* Bump version to prepare 3.0.0Jonathan Huot2018-10-051-1/+1
|
* Merge branch 'master' into fix-585_client_idJonathan Huot2018-09-214-18/+22
|\
| * Fix OIDC tests (#565)Pieter Ennes2018-09-213-17/+19
| | | | | | | | | | | | | | | | | | | | | | | | * Unmute ignored OIDC tests. * Fix more import errors. * Remove recently invalidated test for id_token_hint. * Fix tested grants. * Fix import on py27.
| * fixup! `invalid_grant` status code should be 400Free Duerinckx2018-09-201-0/+2
| |
| * Merge branch 'master' into invalid-grant-should-respond-with-400Omer Katz2018-09-2020-176/+398
| |\
| * \ Merge branch 'master' into invalid-grant-should-respond-with-400Jonathan Huot2018-08-132-0/+6
| |\ \
| * \ \ Merge branch 'master' into invalid-grant-should-respond-with-400Jonathan Huot2018-08-122-2/+2
| |\ \ \
| * | | | `invalid_grant` status code should be 400Free Duerinckx2018-07-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to section 5.2 of rfc 6749 (https://tools.ietf.org/html/rfc6749#section-5.2) A server should respond with 400 in case of an invalid grant. The given grant is invalid and the client should give other data. A 401 is not applicable here because the client is required to give a suitable Authorization header field which doesn't make any sense if you are trying to acquire a grant authentication. According to sections 10.4.1 and 10.4.2 of rfc 2616 (https://tools.ietf.org/html/rfc2616#section-10.4.1)
* | | | | * changed "function definition" to "function signature" in two docstringsjonathan vanasco2018-09-202-14/+21
| | | | | | | | | | | | | | | | | | | | | | | | | * fixed some formatting issues in `prepare_token_request` docstring * slightly altered `prepare_token_request` in handling nontruthy values for `client_secret`.
View Lorry Controller Status