summaryrefslogtreecommitdiff
path: root/oauthlib
Commit message (Collapse)AuthorAgeFilesLines
* Update pydoc in parameters.pyX6VmZSxczGzm9Ak5uy-rrodriguez2020-07-291-2/+2
| | | | | Fix of a couple of typing mistakes in pydoc text: - Usage of " to surround "application/x-form-urlencoded" instead of `` (as in the rest of the documentation) - "presence" written with "c"
* OAuth 1.0a signature methods: RSA-SHA256, RSA-SHA512 and HMAC-SHA512 (#723)Hoylen Sue2020-06-035-421/+605
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Adding support for RSA-SHA256. * Added support for HMAC-SHA512, RSA-SHA256 and RSA-SHA512 signature methods. * Made version dependencies consistent. * Updated OAuth1 signature tests. * Fixed parsing of netloc/host. Deprecated old functions. * Refactored and expanded tests to include signature validate. * Update docs for HMAC-SHA512, RSA-SHA256 and RSA-SHA512 signature methods. * Updated code comments in oauth1 signatures module. * Updated changelog. * Update docs/feature_matrix.rst Co-Authored-By: Omer Katz <omer.drow@gmail.com> * Used parenthesis instead of backslash to break lines. * Fixed typo Co-authored-by: Omer Katz <omer.drow@gmail.com> Co-authored-by: Omer Katz <omer.drow@gmail.com>
* Remove Python 2 codes (#734)Asif Saif Uddin2020-05-1240-40/+0
| | | | | | | | | * Update setup.py * remove un needed python 2 codes * remove un needed python 2 codes * remove un needed python 2 codes
* Merge branch 'master' into isort-integrationJonathan Huot2020-04-225-8/+23
|\
| * Merge branch 'master' into fix_issue_728Jonathan Huot2020-04-222-8/+19
| |\
| | * Merge branch 'master' into masterJonathan Huot2020-04-221-8/+18
| | |\
| | | * Base OAuth2 Client now has a consistent way of managing the `scope`: it ↵Sylvain MARIE2020-04-191-8/+18
| | | | | | | | | | | | | | | | consistently relies on the `scope` provided in the constructor if any, except if overridden temporarily in a method call. Note that in particular providing a non-None `scope` in `prepare_authorization_request` or `prepare_refresh_token` **does not override anymore self.scope forever**, it is just used remporarily. Fixes #730
| | * | Made code a one-liner for consistency with BackendApplicationClientSylvain MARIE2020-04-091-3/+1
| | | |
| | * | `LegacyApplicationClient.prepare_request_body` now honors the default scopes ↵Sylvain MARIE2020-04-091-0/+3
| | |/ | | | | | | | | | defined in client constructor if no explicit overridden `scope` argument is provided. Fixes #725
| * | MobileApplicationClient.prepare_request_uri and ↵Sylvain MARIE2020-04-193-0/+4
| |/ | | | | | | MobileApplicationClient.parse_request_uri_response, ServiceApplicationClient.prepare_request_body, and WebApplicationClient.prepare_request_uri now correctly use the default `scope` provided in constructor. Fixes #728
* | Fixed sorted import for < py37Anton Ruhlov2020-04-102-2/+3
| |
* | Sorted oauthlib imports per isort 4.3.21Anton Ruhlov2020-04-1043-149/+158
|/
* Merge branch 'master' into doc-oidcJonathan Huot2020-01-292-2/+2
|\
| * typo in log message for client_credentialsBohdan2020-01-131-1/+1
| |
| * typo in log message for client_credentialsBohdan2020-01-131-1/+1
| |
| * Fix simple typo: wich -> which (#710)Tim Gates2019-11-121-1/+1
| |
* | Improved OIDC documentationdoc-oidcJonathan Huot2019-10-281-4/+13
|/
* Make grants public attributes of pre_configured server class (#613)Ivan Anishchuk2019-10-222-70/+70
| | | | To make registering hooks without custom server class easier.
* Merge branch 'master' into doc-improvementJonathan Huot2019-08-3062-284/+102
|\
| * Merge branch 'master' into rm-2.7Omer Katz2019-08-291-2/+2
| |\
| * | The future is nowHugo2019-08-1558-116/+0
| | |
| * | Drop support for legacy Python 2.7Hugo2019-08-159-53/+13
| | |
| * | Upgrade Python syntax with pyupgradeHugo2019-08-1528-60/+60
| | |
| * | Drop support for legacy Python 2.7Hugo2019-08-158-57/+31
| | |
* | | Merge branch 'master' into doc-improvementOmer Katz2019-08-261-2/+2
|\ \ \ | | |/ | |/|
| * | Fix tests for OAuth1 signature basestring generation, to better align with ↵Ashley Sommer2019-08-141-2/+2
| |/ | | | | | | | | | | examples and expected results set out in the RFC doc. Fixes https://github.com/oauthlib/oauthlib/issues/695
* | Extended the requirements of the authenticate_client method documentation.Zsolt Balint2019-08-101-0/+11
|/
* Change version to -devJonathan Huot2019-08-061-1/+1
|
* Merge branch 'master' into release-3.1.0Jonathan Huot2019-08-058-51/+186
|\
| * Merge branch 'master' into oidc-userinfooidc-userinfoJonathan Huot2019-08-012-2/+35
| |\
| | * add HMAC-SHA256 signature validationHamish Moffatt2019-07-252-2/+35
| | |
| * | Merge branch 'master' into oidc-userinfoJonathan Huot2019-07-191-1/+1
| |\ \ | | |/
| * | Merge branch 'master' into oidc-userinfoJonathan Huot2019-07-046-7/+55
| |\ \
| * | | Add UserInfoEndpoint to the OIDC Provider support.Jonathan Huot2019-05-135-1/+149
| | | |
| * | | Removed duplicated code for oauth2.BaseEndpointJonathan Huot2019-05-131-48/+2
| | | |
* | | | Bump to 3.1.0Jonathan Huot2019-07-191-1/+1
| |_|/ |/| |
* | | Bump versionJonathan Huot2019-07-191-1/+1
| | |
* | | Merge branch 'master' into release-3.0.2release-3.0.2Jonathan Huot2019-07-1922-278/+375
|\ \ \ | | |/ | |/|
| * | Merge branch 'master' into 672-fix-null-expires-inJonathan Huot2019-07-041-0/+1
| |\ \
| | * | Fix BackendApplicationClient.prepare_request_bodyqporest2019-07-021-0/+1
| | | | | | | | | | | | Currently, if no `scope` is passed to `prepare_request_body`, None will be passed on to `prepare_token_request`, even if BackendApplicationClient was initialized with `scope`.
| * | | Merge branch 'master' into 672-fix-null-expires-inOmer Katz2019-06-2913-22/+245
| |\ \ \ | | |/ /
| | * | Check for authorization response errorsMark Gregson2019-06-061-3/+6
| | | |
| | * | Enforce POST HTTP method on TokenEndpoint, IntrospectEndpoint and ↵Abhishek Patel2019-05-144-2/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | RevocationEndpoint - Add validation checks for HTTP method in TokenEndpoint, IntrospectEndpoint and RevocationEndpoint. - CHANGE DEFAULT HTTP method for TokenEndpoint from 'GET' to 'POST'. - Add tests + Fix an old test in . It used to send query params to TokenEndpoint which is not allowed anymore. Fixed it so payload is sent as POST body.
| | * | Ban all query parameters on Intropspection, Token and Revocation endpopointAbhishek Patel2019-05-141-8/+4
| | | |
| | * | Add tests + create a global variable for blacklisted query parametersAbhishek Patel2019-05-141-7/+9
| | | |
| | * | Add validation check for presence of forbidden query parameters in OAuth2 ↵Abhishek Patel2019-05-144-1/+18
| | |/ | | | | | | | | | TokenEndpoint, IntrospectionEndpoint and RevocationEndpoint
| | * Merge branch 'master' into 670-pkce-requestinfoJonathan Huot2019-05-077-16/+192
| | |\
| | | * Merge branch 'master' into patch-1Jonathan Huot2019-05-076-14/+190
| | | |\
| | | | * Merge branch 'master' into oidc-hashesoidc-hashesJonathan Huot2019-05-061-2/+2
| | | | |\
| | | | | * Add case-insensitive headers to oauth1 BaseEndpointJordan Gardner2019-05-011-2/+2
| | | | | |
View Lorry Controller Status