summaryrefslogtreecommitdiff
path: root/oauthlib
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'master' into 431-customerrors431-customerrorsJonathan Huot2018-08-0233-306/+1164
|\
| * The id_token_hint parameter isn't required by the OIDC spec. (#559)Pieter Ennes2018-07-021-6/+0
| |
| * Remove handling of nonstandard parameter "expires" (#506)Seth Davis2018-06-301-5/+2
| |
| * Update save_bearer_token docs to mention how the token is passed in as a ↵claweyenuk2018-06-301-1/+8
| | | | | | | | reference (#556)
| * OpenID Connect split (#525)Wiliam Souza2018-06-0520-355/+761
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add command to clean up builds to makefile * Fix docs strings for endpoints pre_configured * Chnage grant_types.openid_connect to include a deprecation warning be a backward compatible * Fix doc string for rfc6749.request_validator * Remove unused import * Change import to be explicity * Move JWTTokenTestCase to openid.connect.core.test_token * Move JWTToken to oauthlib.openid.connect.core.tokens * Move to openid connect test * Move openid connect exceptions to its own file * Remove openid connect from oauth2 server * Remove JWTToken from oauth tokens * Remove grant_types.openid_connect file * Add oauthlib/openid estructure and tests
| * Remove Python 2.6 compatibility code.Omer Katz2018-05-261-10/+2
| |
| * Merge branch 'master' into oauth2-introspectPieter Ennes2018-05-2631-206/+341
| |\
| | * Add missing NotImplementedError (#499)Grey Li2018-05-261-0/+1
| | |
| | * Check that the Bearer header is properly formatted (#491)Mattia Procopio2018-05-261-15/+25
| | |
| | * Prepare 2.1.0 release.Pieter Ennes2018-05-261-1/+1
| | | | | | | | | | | | (cherry picked from commit 5c76855)
| | * Ignore Python 2.7 fallback branch.Omer Katz2018-05-201-1/+1
| | |
| | * Don't cover the fallback branch.Omer Katz2018-05-201-1/+1
| | |
| | * Backward compatibility fix for requests-oauthlib. (#546)Pieter Ennes2018-05-183-6/+12
| | |
| | * Avoid populating spurious token credentials (#542)Pieter Ennes2018-05-083-9/+14
| | |
| | * Fixed some copy and paste typos (#535)paulie42018-04-131-2/+2
| | | | | | | | | Fixed some copy and paste typos, see issue #532.
| | * Use secrets module in Python 3.6 and later (#533)Olaf Conradi2018-04-131-3/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | The secrets module should be used for generating cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets. In particularly, secrets should be used in preference to the default pseudo-random number generator in the random module, which is designed for modelling and simulation, not security or cryptography.
| | * Add request argument to confirm_redirect_uri (#504) (#504)Jimmy Thrasibule2018-04-132-2/+3
| | |
| | * Version bump 2.0.7.Pieter Ennes2018-03-191-2/+2
| | | | | | | | | | | | (cherry picked from commit 67ebd7a)
| | * Rtd docs fix (#515)Jonathan Huot2018-02-2827-174/+174
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Added sphinx build for developers Rationale is to build docs locally to prevent RTD to break later. * Replace manual sphinx into make * Renamed idan URL to oauthlib community * Renamed http into https URLs since http is returning 302 * python requests library renamed its home URL * Add ignore list for "make linkcheck" linkcheck is doing requests to github with anonymous access, however creating an issue require an logged-in account * virtualenv changed its homepage and website. * Fixed broken link
| | * Openid connect jwt (#488)Wiliam Souza2018-01-304-6/+113
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add JWT token with it the server knows how to validate this new type of token in resource requests * Change find_token_type sorted function to reverse result and choose the valued estimated token handler * Add validate_id_token method to RequestValidator * Added unittest for JWTToken model * Updated version of Mock * Add get_jwt_bearer_token and validate_jwt_bearer_token oauthlib.oauth2.RequestValidator and change oauthlib.oauth2.tokens JWTToken to use it * Change to improve token type estimate test * Add a note in RequestValidator.validate_jwt_bearer_token about error 5xx rather 4xx
| | * Fix cliend_id in web request body (#505)Antoine Bertin2018-01-291-1/+1
| | | | | | | | | | | | | | | | | | Previously, cliend_id was always included in the request body in the Authorization Code flow and the client_id parameter was ignored in contradiction with the docs. Fixes #495
| * | Improved doc by adding links to RFC and list of claims.Jonathan Huot2017-12-191-5/+25
| | |
| * | Added default supported_token_types for MobileJonathan Huot2017-12-191-1/+2
| | |
| * | Added initial introspect supportJonathan Huot2017-12-186-11/+175
| |/
| * Add support for HMAC-SHA256 (builds on PR#388) (#498)Viktor Haag2017-11-143-5/+65
| | | | | | | | | | | | | | | | | | | | | | | | * Add support for HMAC-SHA256 * Add explicit declaration of HMAC-SHA1 and point HMAC at it To avoid confusion, HMAC constant name should explicitly state which SHA variant is used, but for backwards compatibility, SIGNATURE_HMAC is still needed * add support for HMAC-SHA256 including tests and comments * constructor tests verify client built with correct signer method
| * Check access token in self.token dict (#500)Grey Li2017-11-141-1/+1
| | | | | | | | | | | | * Check access token in self.token dict * fix typo
| * Version bump 2.0.5v2.0.5Hsiaoming Yang2017-10-191-1/+1
| |
| * Refactor OAuth2ErrorHsiaoming Yang2017-10-181-6/+14
| |
| * OpenID connect improvements (#484)Wiliam Souza2017-10-015-24/+122
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Change create_token_response to only save access_token when it's present in request.response_type * Remove unused import, fix indentation and improve comment * Fix AuthorizationEndpoint response_type for OpenID Connect hybrid flow * Add new ImplicitTokenGrantDispatcher Changes AuthorizationEndpoint response_type `'token'`, `'id_token'` and `'id_token token'` to work with OpenID Connect and OAuth2 implicit flow in a transparent way * Add new AuthTokenGrantDispatcher Change AuthorizationEndpoint grant_types `'authorization_code'` to work with OpenID Connect and OAuth2 authorization flow in a transparent way * Change tests to include required client_id and redirect_uri * Remove AuthorizationEndpoint grant_types `'openid'` Now OpenID Connect and OAuth2 authorization flow can use `authorization_code` in a transparent way * Add sone blank lines and fix indentation * Change AuthorizationEndpoint grant type id_token and id_token token to use openid_connect_implicit direct * Change default empty value to None and fix a typo * Add assert called to AuthTokenGrantDispatcher tests * Add request to get_authorization_code_scopes
* | Fixed py27/pypy supportJonathan Huot2018-08-021-1/+1
| |
* | Add support of custom errors coming from providersJonathan Huot2018-08-021-0/+11
| | | | | | | | Fix #431. The inherent function "raise_from_error" is called when "error=" is found in the payload. So it MUST raise something, and until now, only RFC errors were raised.
* | Prepare 2.1.0 release.Pieter Ennes2018-05-211-1/+1
| |
* | Make populate attributes API public.Pieter Ennes2018-05-213-6/+12
| | | | | | | | (cherry picked from commit 0b6f7e2)
* | Avoid populating spurious token credentials (#542)Pieter Ennes2018-05-183-9/+14
| | | | | | | | (cherry picked from commit 657065d)
* | Fixed some copy and paste typos (#535)paulie42018-04-231-2/+2
| | | | | | | | | | | | Fixed some copy and paste typos, see issue #532. (cherry picked from commit 1b3498a)
* | Use secrets module in Python 3.6 and later (#533)Olaf Conradi2018-04-231-3/+8
| | | | | | | | | | | | | | | | | | | | | | | | The secrets module should be used for generating cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets. In particularly, secrets should be used in preference to the default pseudo-random number generator in the random module, which is designed for modelling and simulation, not security or cryptography. (cherry picked from commit d21fd53)
* | Add request argument to confirm_redirect_uri (#504) (#504)Jimmy Thrasibule2018-04-232-2/+3
| | | | | | | | (cherry picked from commit d49b9f0)
* | Version bump 2.0.7.Pieter Ennes2018-03-091-2/+2
| |
* | Rtd docs fix (#515)Jonathan Huot2018-03-0927-168/+168
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Added sphinx build for developers Rationale is to build docs locally to prevent RTD to break later. * Replace manual sphinx into make * Renamed idan URL to oauthlib community * Renamed http into https URLs since http is returning 302 * python requests library renamed its home URL * Add ignore list for "make linkcheck" linkcheck is doing requests to github with anonymous access, however creating an issue require an logged-in account * virtualenv changed its homepage and website. * Fixed broken link (cherry picked from commit 32e5ad1)
* | Check access token in self.token dict (#500)Grey Li2018-03-091-1/+1
| | | | | | | | | | | | | | | | * Check access token in self.token dict * fix typo (cherry picked from commit fa0b63c)
* | Version bump 2.0.6v2.0.6Hsiaoming Yang2017-10-201-1/+1
| |
* | Version bump 2.0.5Hsiaoming Yang2017-10-201-1/+1
| |
* | Refactor OAuth2ErrorHsiaoming Yang2017-10-201-6/+14
|/
* if `in_uri` is called and `response_mode` is not initialized an exception is ↵Mathias Mitterdorfer2017-09-221-0/+1
| | | | raised (used by Flask_OAuthlib)
* Add nonce to docstring.Pieter Ennes2017-09-171-0/+7
|
* Pass through nonce in code flow.Pieter Ennes2017-09-171-3/+2
|
* Bump version.v2.0.4Omer Katz2017-09-171-1/+1
|
* Fixed typo in imports.Omer Katz2017-09-171-1/+1
|
* Sorted imports.Omer Katz2017-09-1736-88/+93
|
* Merge pull request #468 from ThePrudents/fix-explicit-importOmer Katz2017-09-113-3/+3
|\ | | | | Changed all implicit imports * with explicit classes imports
View Lorry Controller Status