| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Fix issue when using Metadata Endpoint with OIDC PreConfigured server. | Jonathan Huot | 2018-12-14 | 1 | -0/+27 |
| | | |||||
| * | Merge branch 'master' into 601-pkce-support | Jonathan Huot | 2018-12-13 | 2 | -8/+33 |
| |\ | |||||
| | * | Add Content-Type and Cache headers to introspect/revocation errors | Jonathan Huot | 2018-12-13 | 2 | -8/+33 |
| | | | |||||
| | * | Add double-quotes to the key/values in WWW-Authenticate264-status401 | Jonathan Huot | 2018-12-12 | 2 | -4/+4 |
| | | | |||||
| | * | Used WWW-Authenticate and auth-param values as RFC6750 described it. | Jonathan Huot | 2018-12-12 | 2 | -4/+4 |
| | | | | | | | | | It misses the possibility to add scope= and realm= at the moment, but it should be a step forward into the right direction. | ||||
| | * | Handle 401 with WWW-Authenticate. Moved wrong 401 into 400. | Jonathan Huot | 2018-12-04 | 2 | -4/+4 |
| | | | | | | | | | access_denied/unauthorized_client/consent_required/login_required MUST be 400, and not 401. Also, 401 MUST have WWW-Authenticate when set. It could have an impact of processing those in webframeworks. | ||||
| * | | Merge pull request #624 from oauthlib/preconf-server-metadata | Jonathan Huot | 2018-12-11 | 1 | -0/+61 |
| |\ \ | | | | | | | Preconf server metadata | ||||
| | * | | Sort dict and list in dict values for py27/36 compatpreconf-server-metadata | Jonathan Huot | 2018-11-30 | 1 | -2/+10 |
| | | | | |||||
| | * | | Add Server metadata test and fix metadata. | Jonathan Huot | 2018-11-30 | 1 | -0/+53 |
| | | | | | | | | | | | | | Fix grant_types_supported which must include "implicit" even if it is not a grant_type in oauthlib sense. Removed internal "none" field value from the list of response_types. | ||||
| * | | | Merge branch 'master' into 601-pkce-support | Jonathan Huot | 2018-12-11 | 1 | -1/+1 |
| |\ \ \ | |/ / |/| / | |/ | |||||
| | * | `invalid_scope` status code should be 400 | Benjamin Pereto | 2018-12-03 | 1 | -1/+1 |
| | | | |||||
| * | | Initial OAuth2.0/PKCE Provider support | Jonathan Huot | 2018-11-29 | 11 | -0/+139 |
| |/ | |||||
| * | Merge branch 'master' into 613-oidc-dispatcher613-oidc-dispatcher | Jonathan Huot | 2018-11-23 | 1 | -0/+38 |
| |\ | |||||
| | * | Allow custom provider to override oauthlib valuesoauth-metadata | Jonathan Huot | 2018-11-21 | 1 | -0/+10 |
| | | | | | | | | | See https://github.com/oauthlib/oauthlib/pull/605#discussion_r234438151 | ||||
| | * | Initial OAuth Authorization Server Metadata RFC8414 | Jonathan Huot | 2018-10-25 | 1 | -0/+28 |
| | | | |||||
| * | | Fix unit tests for new Dispatch attributes names | Jonathan Huot | 2018-11-20 | 1 | -8/+8 |
| |/ | |||||
| * | Merge branch 'master' into fix-585_client_id | Jonathan Huot | 2018-09-21 | 13 | -40/+24 |
| |\ | |||||
| | * | Fix OIDC tests (#565) | Pieter Ennes | 2018-09-21 | 12 | -39/+23 |
| | | | | | | | | | | | | | | | | | | | | | | | | | * Unmute ignored OIDC tests. * Fix more import errors. * Remove recently invalidated test for id_token_hint. * Fix tested grants. * Fix import on py27. | ||||
| | * | Merge branch 'master' into invalid-grant-should-respond-with-400 | Omer Katz | 2018-09-20 | 9 | -42/+68 |
| | |\ | |||||
| | * \ | Merge branch 'master' into invalid-grant-should-respond-with-400 | Jonathan Huot | 2018-08-13 | 3 | -2/+18 |
| | |\ \ | |||||
| | * \ \ | Merge branch 'master' into invalid-grant-should-respond-with-400 | Jonathan Huot | 2018-08-12 | 1 | -0/+2 |
| | |\ \ \ | |||||
| | * | | | | `invalid_grant` status code should be 400 | Free Duerinckx | 2018-07-04 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to section 5.2 of rfc 6749 (https://tools.ietf.org/html/rfc6749#section-5.2) A server should respond with 400 in case of an invalid grant. The given grant is invalid and the client should give other data. A 401 is not applicable here because the client is required to give a suitable Authorization header field which doesn't make any sense if you are trying to acquire a grant authentication. According to sections 10.4.1 and 10.4.2 of rfc 2616 (https://tools.ietf.org/html/rfc2616#section-10.4.1) | ||||
| * | | | | | * changed "function definition" to "function signature" in two docstrings | jonathan vanasco | 2018-09-20 | 1 | -1/+0 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | * fixed some formatting issues in `prepare_token_request` docstring * slightly altered `prepare_token_request` in handling nontruthy values for `client_secret`. | ||||
| * | | | | | Merge branch 'fix-585_client_id' of github.com:jvanasco/oauthlib into ↵ | jonathan vanasco | 2018-09-17 | 5 | -41/+23 |
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | fix-585_client_id | ||||
| | * \ \ \ \ | Merge branch 'master' into fix-585_client_id | Jonathan Huot | 2018-09-17 | 5 | -41/+23 |
| | |\ \ \ \ \ | | | |_|_|/ | | |/| | | | |||||
| | | * | | | | Merge branch 'master' into 431-customexception | Jonathan Huot | 2018-09-15 | 4 | -41/+19 |
| | | |\ \ \ \ | |||||
| | | | * | | | | Correct recent merge (#596) | Jon Dufresne | 2018-09-14 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Merge c8a7cb199a8d448c2934100a5bb06598be402939 mistakenly reverted a line from aef9a3e944f41c3afaaf22ba20f86a267a7d3bb3. | ||||
| | | | * | | | | Merge branch 'master' into bytes | Jonathan Huot | 2018-09-14 | 1 | -7/+7 |
| | | | |\ \ \ \ | |||||
| | | | | * | | | | Prefer assertIsInstance(...) over assertTrue(isinstance(...)) | Jon Dufresne | 2018-09-14 | 2 | -8/+8 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It is a more explicit assert with a more information message in case of failure. For a full list of available assert methods, see: https://docs.python.org/3/library/unittest.html#assert-methods | ||||
| | | | * | | | | | Remove unnecessary workaround for bytes type | Jon Dufresne | 2018-09-14 | 2 | -15/+10 |
| | | | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The type 'bytes' is available on all supported Pythons. Likewise the byte literal b'...' is available on all supported Pythons. Use idiomatic Python and remove workaround for an issue that no longer exists. Makes the code more forward compatible with Python 3. | ||||
| | | | * | | | | Remove workarounds for unsupported Python 2.6 | Jon Dufresne | 2018-09-11 | 1 | -19/+2 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Python 2.6 support was removed in 91152df142bdde134d84ed27963cda8e6b878416. Drop unittest2 dependency. All necessary testing features are included in the stdlib unittest. | ||||
| | | * | | | | | Add support of custom errors coming from providers | Jonathan Huot | 2018-09-10 | 1 | -0/+4 |
| | | |/ / / / | | | | | | | | | | | | | | | | | | | Fix #431. The inherent function "raise_from_error" is called when "error=" is found in the payload. So it MUST raise something, and until now, only RFC errors were raised. | ||||
| * | | | | | | migrated `include_client_id` to `prepare_request_token` | jonathan vanasco | 2018-09-17 | 3 | -17/+67 |
| |/ / / / / | |||||
| * | | | | | * added support for empty strings of `client_secret` | jonathan vanasco | 2018-09-17 | 2 | -10/+48 |
| | | | | | | | | | | | | | | | | | | | | | * added LegacyApplicationClient tests to ensure the grant supports a variety of allowed methods | ||||
| * | | | | | standardized some test values | jonathan vanasco | 2018-09-14 | 2 | -8/+8 |
| | | | | | | | | | | | | | | | | | | | | | integrated against requests_oauthlib idea | ||||
| * | | | | | updated tests to pass on 2.x and 3.x | jonathan vanasco | 2018-09-13 | 1 | -5/+10 |
| | | | | | | |||||
| * | | | | | * addresing ticket #585 | jonathan vanasco | 2018-09-13 | 1 | -1/+48 |
| |/ / / / | | | | | | | | | | | | | | | | | | | | | * `prepare_request_body` client_id is deprecated in favor of include_client_id * a new unit test `test_prepare_request_body` is added to ensure conformity of several use cases * the docstrings for the `body` param have been consolidated and standardized across multiple functions linked to `prepare_request_body` for clarity | ||||
| * | | | | Write a test for authorization grant w/ no scope. | Theron Luhn | 2018-09-03 | 1 | -0/+6 |
| | | | | | |||||
| * | | | | Fix test_error_catching. | Theron Luhn | 2018-09-02 | 1 | -1/+3 |
| | | | | | |||||
| * | | | | Merge branch 'master' into 445_confirm_redirect | Jonathan Huot | 2018-08-20 | 1 | -0/+5 |
| |\ \ \ \ | |||||
| | * | | | | Remove headers from request attributes | Jonathan Huot | 2018-08-18 | 1 | -0/+5 |
| | | |_|/ | |/| | | |||||
| * | | | | Merge branch 'master' into 445_confirm_redirect | Jonathan Huot | 2018-08-15 | 4 | -2/+20 |
| |\ \ \ \ | |/ / / | |||||
| | * | | | Merge branch 'master' into get_default_redir | Jonathan Huot | 2018-08-12 | 3 | -2/+4 |
| | |\ \ \ | |||||
| | | * \ \ | Merge branch 'master' into 569_expires_in_implicit | Jonathan Huot | 2018-08-12 | 1 | -0/+2 |
| | | |\ \ \ | | | | |/ | | | |/| | |||||
| | | | * | | $ and ' are allowed to be unencoded in query strings (#564) | Chris Utz | 2018-08-12 | 1 | -0/+2 |
| | | | |/ | |||||
| | | * | | Implicit was not converting expires_in into integers | Jonathan Huot | 2018-08-06 | 2 | -2/+2 |
| | | |/ | |||||
| | * | | Add syntax check of get_default_redirect_uri | Jonathan Huot | 2018-07-30 | 1 | -0/+16 |
| | |/ | | | | | | | Authorization Code was missing this check, whereas Implicit was checking it. | ||||
| * | | Add test when no redirecturi & no default | Jonathan Huot | 2018-08-15 | 1 | -0/+9 |
| | | | |||||
| * | | Restore confirm = False test | Jonathan Huot | 2018-08-15 | 1 | -0/+2 |
| | | | |||||
| * | | confirm_r. is called after auth_client | Jonathan Huot | 2018-07-30 | 1 | -1/+0 |
| | | | |||||
 |
index : delta/python-packages/oauthlib.git | |
| github.com: idan/oauthlib.git |
| summaryrefslogtreecommitdiff |