summaryrefslogtreecommitdiff
path: root/tests/oauth2/rfc6749/endpoints/test_revocation_endpoint.py
Commit message (Collapse)AuthorAgeFilesLines
* rm comma after Bearer in WWW-Authenticate headerkamenev2021-11-141-2/+2
|
* Sorted tests import per isort 4.3.21Anton Ruhlov2020-04-101-2/+1
|
* Use unittest.mock instead of external mockMichał Górny2020-03-161-1/+1
| | | | | | Replace the use of external 'mock' package with built-in Python unittest.mock (present since py3.3). This also fixes all test failures for me.
* The future is nowHugo2019-08-151-2/+0
|
* Enforce POST HTTP method on TokenEndpoint, IntrospectEndpoint and ↵Abhishek Patel2019-05-141-0/+15
| | | | | | | | RevocationEndpoint - Add validation checks for HTTP method in TokenEndpoint, IntrospectEndpoint and RevocationEndpoint. - CHANGE DEFAULT HTTP method for TokenEndpoint from 'GET' to 'POST'. - Add tests + Fix an old test in . It used to send query params to TokenEndpoint which is not allowed anymore. Fixed it so payload is sent as POST body.
* Ban all query parameters on Intropspection, Token and Revocation endpopointAbhishek Patel2019-05-141-4/+2
|
* Add tests + create a global variable for blacklisted query parametersAbhishek Patel2019-05-141-0/+16
|
* Add Content-Type and Cache headers to introspect/revocation errorsJonathan Huot2018-12-131-4/+19
|
* Add double-quotes to the key/values in WWW-Authenticate264-status401Jonathan Huot2018-12-121-2/+2
|
* Used WWW-Authenticate and auth-param values as RFC6750 described it.Jonathan Huot2018-12-121-2/+2
| | | | It misses the possibility to add scope= and realm= at the moment, but it should be a step forward into the right direction.
* Handle 401 with WWW-Authenticate. Moved wrong 401 into 400.Jonathan Huot2018-12-041-2/+2
| | | | access_denied/unauthorized_client/consent_required/login_required MUST be 400, and not 401. Also, 401 MUST have WWW-Authenticate when set. It could have an impact of processing those in webframeworks.
* Sorted imports.Omer Katz2017-09-171-0/+1
|
* Python 3 fixesAndy Kipp2016-12-061-1/+1
|
* Fix testsAndy Kipp2016-12-061-13/+23
|
* add token_type_hint to the list of default Request paramsMassimiliano Pippi2015-07-201-0/+8
|
* Add code to determine if client authentication is required for OAuth2 ↵Weipin Xia2015-07-191-0/+12
| | | | endpoint "revocation"
* Fix tests for #300 mergedHsiaoming Yang2015-07-061-5/+3
|
* Merge pull request #300 from jbkkd/masterHsiaoming Yang2015-07-061-1/+1
|\ | | | | Revocation endpoint should return empty string, not Python 'None'
| * Updated revocation testOmer Korner2014-11-261-1/+1
| |
* | Add code to determine if client authentication is required for OAuth2 ↵Weipin Xia2015-05-071-0/+12
|/ | | | endpoint "revocation"
* Allow invalid token_type_hint.Rodney Richardson2014-10-071-11/+2
| | | | | Invalid token_type_hints should be ignored. This looks to have been broken in 6ffcc4f2ae6b66e42c1f58b6de634fe969b473a0
* Make jsonp support in revocation endpoint optional.Ib Lundgren2014-09-251-4/+14
| | | | Also include the error in jsonp callback.
* Draft 11 Token Revocation Endpoint.Ib Lundgren2013-09-171-0/+65