summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'master' into docs-flows-hooksdocs-flows-hooksJonathan Huot2019-08-0112-54/+262
|\
| * Oidc userinfo (#677)Jonathan Huot2019-08-018-49/+222
| |\
| | * Merge branch 'master' into oidc-userinfooidc-userinfoJonathan Huot2019-08-012-2/+35
| | |\ | | |/ | |/|
| * | add HMAC-SHA256 signature validation (#691)Jonathan Huot2019-07-252-2/+35
| |\ \
| | * | add HMAC-SHA256 signature validationHamish Moffatt2019-07-252-2/+35
| |/ /
| | * Merge branch 'master' into oidc-userinfoJonathan Huot2019-07-192-3/+5
| | |\ | | |/ | |/|
| * | Bump versionJonathan Huot2019-07-191-1/+1
| * | Release 3.0.2 (#683)Jonathan Huot2019-07-192-3/+5
| |\ \
| | * \ Merge branch 'master' into release-3.0.2release-3.0.2Jonathan Huot2019-07-1947-329/+1979
| | |\ \ | | |/ / | |/| |
| | * | Bump versionv3.0.2Jonathan Huot2019-07-041-1/+1
| | * | Update for 3.0.2Jonathan Huot2019-07-041-1/+4
| | * | Notifications must be sent for every buildJonathan Huot2019-07-041-1/+1
| | * | Added missing import after test movedJonathan Huot2019-07-041-2/+5
| | * | Move HybridGrant test into its respective file.Jonathan Huot2019-07-042-75/+76
| | * | Add nonce mandatory check for "id_token" response_typeJonathan Huot2019-07-041-0/+21
| | * | Add nonce auth request check for authorization_codeJonathan Huot2019-07-041-0/+14
| | * | OIDC: Raise error=invalid_request when nonce is mandatoryJonathan Huot2019-07-044-32/+99
| | * | Change to 3.0.2-dev as long as master is in "dev"Jonathan Huot2019-07-042-2/+2
| | * | Removed useless set_state internal functionJonathan Huot2019-07-041-7/+1
| | * | Add authorization "state" preservation back for AuthCodeJonathan Huot2019-07-041-0/+7
| | * | Add clarity to the deprecation warningJonathan Huot2019-07-041-2/+2
| | * | Fix 652: removed "state" from /token response.Jonathan Huot2019-07-0413-49/+72
| | | * Merge branch 'master' into oidc-userinfoJonathan Huot2019-07-0413-13/+206
| | | |\ | | |_|/ | |/| |
| | | * Downgrade python to match with TravisJonathan Huot2019-05-131-1/+1
| | | * Force bandit python version to be sure no conflict with othersJonathan Huot2019-05-131-0/+1
| | | * Updated bandit baseline after reviewJonathan Huot2019-05-131-5/+1179
| | | * Add UserInfoEndpoint to the OIDC Provider support.Jonathan Huot2019-05-137-1/+220
| | | * Removed duplicated code for oauth2.BaseEndpointJonathan Huot2019-05-131-48/+2
* | | | Merge branch 'master' into docs-flows-hooksJonathan Huot2019-07-0928-48/+1788
|\ \ \ \ | |/ / /
| * | | Handle null value in expires_in field in JSON handler (#675)Jonathan Huot2019-07-042-1/+22
| |\ \ \
| | * \ \ Merge branch 'master' into 672-fix-null-expires-inJonathan Huot2019-07-041-0/+1
| | |\ \ \ | | |/ / / | |/| | |
| * | | | Fix BackendApplicationClient.prepare_request_body (#682)Jonathan Huot2019-07-041-0/+1
| |\ \ \ \
| | * \ \ \ Merge branch 'master' into patch-2Jonathan Huot2019-07-031-1/+1
| | |\ \ \ \ | | |/ / / / | |/| | | |
| | * | | | Fix BackendApplicationClient.prepare_request_bodyqporest2019-07-021-0/+1
| | | * | | Merge branch 'master' into 672-fix-null-expires-inJosh Holmer2019-07-031-1/+1
| | | |\ \ \ | | |_|/ / / | |/| | | |
| * | | | | Error in timestamp comparisonJonathan Huot2019-07-031-1/+1
| |/ / / /
| | * | | Merge branch 'master' into 672-fix-null-expires-inOmer Katz2019-06-2927-47/+1765
| | |\ \ \ | | |/ / / | |/| | |
| * | | | Check for errors in authorization code response (#680)Jonathan Huot2019-06-122-6/+12
| |\ \ \ \
| | * \ \ \ Merge branch 'master' into 290-code-response-errorsJonathan Huot2019-06-121-0/+12
| | |\ \ \ \ | | |/ / / / | |/| | | |
| * | | | | Create FUNDING.ymlOmer Katz2019-06-111-0/+12
| | * | | | Check for authorization response errorsMark Gregson2019-06-062-6/+12
| |/ / / /
| * | | | Merge pull request #667 from Abhishek8394/sanitize-getJonathan Huot2019-05-1910-10/+1338
| |\ \ \ \ | | |_|_|/ | |/| | |
| | * | | Downgrade python to match with TravisJonathan Huot2019-05-161-0/+1
| | * | | Updated bandit baseline after reviewJonathan Huot2019-05-161-5/+1179
| | * | | Enforce POST HTTP method on TokenEndpoint, IntrospectEndpoint and RevocationE...Abhishek Patel2019-05-148-21/+107
| | * | | Ban all query parameters on Intropspection, Token and Revocation endpopointAbhishek Patel2019-05-144-26/+15
| | * | | Add tests + create a global variable for blacklisted query parametersAbhishek Patel2019-05-144-7/+68
| | * | | Add validation check for presence of forbidden query parameters in OAuth2 Tok...Abhishek Patel2019-05-144-1/+18
| |/ / /
| * | | Merge pull request #671 from oauthlib/670-pkce-requestinfoJonathan Huot2019-05-072-2/+7
| |\ \ \
| | * \ \ Merge branch 'master' into 670-pkce-requestinfoJonathan Huot2019-05-0712-29/+396
| | |\ \ \ | | |/ / / | |/| | |