summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Merge branch 'master' into oidc-userinfooidc-userinfoJonathan Huot2019-08-012-2/+35
|\
| * add HMAC-SHA256 signature validation (#691)Jonathan Huot2019-07-252-2/+35
| |\
| | * add HMAC-SHA256 signature validationHamish Moffatt2019-07-252-2/+35
| |/
* | Merge branch 'master' into oidc-userinfoJonathan Huot2019-07-192-3/+5
|\ \ | |/
| * Bump versionJonathan Huot2019-07-191-1/+1
| * Release 3.0.2 (#683)Jonathan Huot2019-07-192-3/+5
| |\
| | * Merge branch 'master' into release-3.0.2release-3.0.2Jonathan Huot2019-07-1947-329/+1979
| | |\ | | |/ | |/|
| | * Bump versionv3.0.2Jonathan Huot2019-07-041-1/+1
| | * Update for 3.0.2Jonathan Huot2019-07-041-1/+4
| | * Notifications must be sent for every buildJonathan Huot2019-07-041-1/+1
| | * Added missing import after test movedJonathan Huot2019-07-041-2/+5
| | * Move HybridGrant test into its respective file.Jonathan Huot2019-07-042-75/+76
| | * Add nonce mandatory check for "id_token" response_typeJonathan Huot2019-07-041-0/+21
| | * Add nonce auth request check for authorization_codeJonathan Huot2019-07-041-0/+14
| | * OIDC: Raise error=invalid_request when nonce is mandatoryJonathan Huot2019-07-044-32/+99
| | * Change to 3.0.2-dev as long as master is in "dev"Jonathan Huot2019-07-042-2/+2
| | * Removed useless set_state internal functionJonathan Huot2019-07-041-7/+1
| | * Add authorization "state" preservation back for AuthCodeJonathan Huot2019-07-041-0/+7
| | * Add clarity to the deprecation warningJonathan Huot2019-07-041-2/+2
| | * Fix 652: removed "state" from /token response.Jonathan Huot2019-07-0413-49/+72
* | | Merge branch 'master' into oidc-userinfoJonathan Huot2019-07-0413-13/+206
|\ \ \ | |/ /
| * | Handle null value in expires_in field in JSON handler (#675)Jonathan Huot2019-07-042-1/+22
| |\ \
| | * \ Merge branch 'master' into 672-fix-null-expires-inJonathan Huot2019-07-041-0/+1
| | |\ \ | | |/ / | |/| |
| * | | Fix BackendApplicationClient.prepare_request_body (#682)Jonathan Huot2019-07-041-0/+1
| |\ \ \
| | * \ \ Merge branch 'master' into patch-2Jonathan Huot2019-07-031-1/+1
| | |\ \ \ | | |/ / / | |/| | |
| | * | | Fix BackendApplicationClient.prepare_request_bodyqporest2019-07-021-0/+1
| | | * | Merge branch 'master' into 672-fix-null-expires-inJosh Holmer2019-07-031-1/+1
| | | |\ \ | | |_|/ / | |/| | |
| * | | | Error in timestamp comparisonJonathan Huot2019-07-031-1/+1
| |/ / /
| | * | Merge branch 'master' into 672-fix-null-expires-inOmer Katz2019-06-2927-47/+1765
| | |\ \ | | |/ / | |/| |
| * | | Check for errors in authorization code response (#680)Jonathan Huot2019-06-122-6/+12
| |\ \ \
| | * \ \ Merge branch 'master' into 290-code-response-errorsJonathan Huot2019-06-121-0/+12
| | |\ \ \ | | |/ / / | |/| | |
| * | | | Create FUNDING.ymlOmer Katz2019-06-111-0/+12
| | * | | Check for authorization response errorsMark Gregson2019-06-062-6/+12
| |/ / /
| * | | Merge pull request #667 from Abhishek8394/sanitize-getJonathan Huot2019-05-1910-10/+1338
| |\ \ \
| | * | | Downgrade python to match with TravisJonathan Huot2019-05-161-0/+1
| | * | | Updated bandit baseline after reviewJonathan Huot2019-05-161-5/+1179
| | * | | Enforce POST HTTP method on TokenEndpoint, IntrospectEndpoint and RevocationE...Abhishek Patel2019-05-148-21/+107
| | * | | Ban all query parameters on Intropspection, Token and Revocation endpopointAbhishek Patel2019-05-144-26/+15
| | * | | Add tests + create a global variable for blacklisted query parametersAbhishek Patel2019-05-144-7/+68
| | * | | Add validation check for presence of forbidden query parameters in OAuth2 Tok...Abhishek Patel2019-05-144-1/+18
| |/ / /
| | * | Handle null value in expires_in field in JSON handlerJosh Holmer2019-04-302-1/+22
* | | | Downgrade python to match with TravisJonathan Huot2019-05-131-1/+1
* | | | Force bandit python version to be sure no conflict with othersJonathan Huot2019-05-131-0/+1
* | | | Updated bandit baseline after reviewJonathan Huot2019-05-131-5/+1179
* | | | Add UserInfoEndpoint to the OIDC Provider support.Jonathan Huot2019-05-137-1/+220
* | | | Removed duplicated code for oauth2.BaseEndpointJonathan Huot2019-05-131-48/+2
|/ / /
* | | Merge pull request #671 from oauthlib/670-pkce-requestinfoJonathan Huot2019-05-072-2/+7
|\ \ \
| * \ \ Merge branch 'master' into 670-pkce-requestinfoJonathan Huot2019-05-0712-29/+396
| |\ \ \ | |/ / / |/| | |
* | | | Merge pull request #674 from bungoume/patch-1Jonathan Huot2019-05-072-4/+79
|\ \ \ \
| * \ \ \ Merge branch 'master' into patch-1Jonathan Huot2019-05-0710-25/+317
| |\ \ \ \ | |/ / / / |/| | | |