summaryrefslogtreecommitdiff
path: root/oauthlib
Commit message (Collapse)AuthorAgeFilesLines
* Make grants public attributes of pre_configured server class (#613)Ivan Anishchuk2019-10-222-70/+70
| | | | To make registering hooks without custom server class easier.
* Merge branch 'master' into doc-improvementJonathan Huot2019-08-3062-284/+102
|\
| * Merge branch 'master' into rm-2.7Omer Katz2019-08-291-2/+2
| |\
| * | The future is nowHugo2019-08-1558-116/+0
| | |
| * | Drop support for legacy Python 2.7Hugo2019-08-159-53/+13
| | |
| * | Upgrade Python syntax with pyupgradeHugo2019-08-1528-60/+60
| | |
| * | Drop support for legacy Python 2.7Hugo2019-08-158-57/+31
| | |
* | | Merge branch 'master' into doc-improvementOmer Katz2019-08-261-2/+2
|\ \ \ | | |/ | |/|
| * | Fix tests for OAuth1 signature basestring generation, to better align with ↵Ashley Sommer2019-08-141-2/+2
| |/ | | | | | | | | | | examples and expected results set out in the RFC doc. Fixes https://github.com/oauthlib/oauthlib/issues/695
* | Extended the requirements of the authenticate_client method documentation.Zsolt Balint2019-08-101-0/+11
|/
* Change version to -devJonathan Huot2019-08-061-1/+1
|
* Merge branch 'master' into release-3.1.0Jonathan Huot2019-08-058-51/+186
|\
| * Merge branch 'master' into oidc-userinfooidc-userinfoJonathan Huot2019-08-012-2/+35
| |\
| | * add HMAC-SHA256 signature validationHamish Moffatt2019-07-252-2/+35
| | |
| * | Merge branch 'master' into oidc-userinfoJonathan Huot2019-07-191-1/+1
| |\ \ | | |/
| * | Merge branch 'master' into oidc-userinfoJonathan Huot2019-07-046-7/+55
| |\ \
| * | | Add UserInfoEndpoint to the OIDC Provider support.Jonathan Huot2019-05-135-1/+149
| | | |
| * | | Removed duplicated code for oauth2.BaseEndpointJonathan Huot2019-05-131-48/+2
| | | |
* | | | Bump to 3.1.0Jonathan Huot2019-07-191-1/+1
| |_|/ |/| |
* | | Bump versionJonathan Huot2019-07-191-1/+1
| | |
* | | Merge branch 'master' into release-3.0.2release-3.0.2Jonathan Huot2019-07-1922-278/+375
|\ \ \ | | |/ | |/|
| * | Merge branch 'master' into 672-fix-null-expires-inJonathan Huot2019-07-041-0/+1
| |\ \
| | * | Fix BackendApplicationClient.prepare_request_bodyqporest2019-07-021-0/+1
| | | | | | | | | | | | Currently, if no `scope` is passed to `prepare_request_body`, None will be passed on to `prepare_token_request`, even if BackendApplicationClient was initialized with `scope`.
| * | | Merge branch 'master' into 672-fix-null-expires-inOmer Katz2019-06-2913-22/+245
| |\ \ \ | | |/ /
| | * | Check for authorization response errorsMark Gregson2019-06-061-3/+6
| | | |
| | * | Enforce POST HTTP method on TokenEndpoint, IntrospectEndpoint and ↵Abhishek Patel2019-05-144-2/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | RevocationEndpoint - Add validation checks for HTTP method in TokenEndpoint, IntrospectEndpoint and RevocationEndpoint. - CHANGE DEFAULT HTTP method for TokenEndpoint from 'GET' to 'POST'. - Add tests + Fix an old test in . It used to send query params to TokenEndpoint which is not allowed anymore. Fixed it so payload is sent as POST body.
| | * | Ban all query parameters on Intropspection, Token and Revocation endpopointAbhishek Patel2019-05-141-8/+4
| | | |
| | * | Add tests + create a global variable for blacklisted query parametersAbhishek Patel2019-05-141-7/+9
| | | |
| | * | Add validation check for presence of forbidden query parameters in OAuth2 ↵Abhishek Patel2019-05-144-1/+18
| | |/ | | | | | | | | | TokenEndpoint, IntrospectionEndpoint and RevocationEndpoint
| | * Merge branch 'master' into 670-pkce-requestinfoJonathan Huot2019-05-077-16/+192
| | |\
| | | * Merge branch 'master' into patch-1Jonathan Huot2019-05-076-14/+190
| | | |\
| | | | * Merge branch 'master' into oidc-hashesoidc-hashesJonathan Huot2019-05-061-2/+2
| | | | |\
| | | | | * Add case-insensitive headers to oauth1 BaseEndpointJordan Gardner2019-05-011-2/+2
| | | | | |
| | | | * | Removed wrong assumption from copy/paste of get_autho.._scopes.Jonathan Huot2019-04-291-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | This function should always have a good client_id and redirect_uri, because it is called after validate_token_request()
| | | | * | Fix typo gave/haveJonathan Huot2019-04-291-2/+2
| | | | | |
| | | | * | Fix docstring about return valueJonathan Huot2019-04-291-1/+1
| | | | | |
| | | | * | Merge branch 'master' into oidc-hashesJonathan Huot2019-04-262-0/+20
| | | | |\ \ | | | | | |/
| | | | * | Merge branch 'master' into oidc-hashesJonathan Huot2019-04-234-35/+35
| | | | |\ \
| | | | * | | Python2.7 compatibleJonathan Huot2019-03-261-2/+2
| | | | | | |
| | | | * | | Add unittests for OIDC GrantTypeBase.Jonathan Huot2019-03-261-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Rename hash_id_token into id_token_hash
| | | | * | | Use native operator instead type conversionJonathan Huot2019-03-261-1/+1
| | | | | | |
| | | | * | | Renamed fill into finalize to add clarityJonathan Huot2019-03-262-5/+5
| | | | | | |
| | | | * | | Merge branch 'master' into oidc-hashesJonathan Huot2019-03-051-1/+1
| | | | |\ \ \
| | | | * | | | Change to 3.0.2-dev as long as master is in "dev"Jonathan Huot2019-03-051-1/+1
| | | | | | | |
| | | | * | | | Add c_hash. Add summary about when nonce/hashes are added to id_tokenJonathan Huot2019-02-281-0/+29
| | | | | | | |
| | | | * | | | Add technicals fields of `id_token` in oauthlib OIDC supportJonathan Huot2019-02-285-9/+157
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A new RequestValidator `fill_id_token` has been introduced to replace `get_id_token`. It aims to have the bare minimum amount of fields to complete a full OIDC id_token support. `get_id_token` is still valid but optional, and if it is implemented, `fill_id_token` will not be called. The current `fill_id_token` came with full support of `aud`, `iat`, `nonce`, `at_hash` and `c_hash`. More could come in the future e.g. `auth_time`, ...
| | | | * | | | Removed duplicated OIDC members in OAuth2.RequestValidatorJonathan Huot2019-02-282-182/+1
| | | | | | | |
| | | * | | | | token_type should be case insensitiveume2019-05-011-2/+2
| | | | |_|_|/ | | | |/| | |
| | * | | | | Fix 670. AuthCode API must return the new PKCE attribute670-pkce-requestinfoJonathan Huot2019-04-261-0/+3
| | |/ / / /
| * | | | | Handle null value in expires_in field in JSON handlerJosh Holmer2019-04-301-1/+4
| |/ / / / | | | | | | | | | | | | | | | Closes #672