github.com/freerange/oauth2-provider commits | Ecosyste.ms: OpenCollective

Add rake spec:all task, and set as default

a71aaee34280ab510b6ef7f31f1ae3cecc062b0d authored almost 14 years ago by Tom Ward <[email protected]>

Release version 0.0.12

955ff94f5191f896cc5e63603139f570bf7e0f73 authored almost 14 years ago by Tom Ward <[email protected]>

Allow custom access token expiry times when authorization codes are claimed.

Also, change resource owner handling to use a custom polymorphic resource owners, as relying on ...

39d8aa8d4f8496eb48d21f41959af3c2055e3f14 authored almost 14 years ago by Tom Ward <[email protected]>

Update to version 0.0.11

6756bf631f92c2ddcedcfd28725593ee4bf106a6 authored almost 14 years ago by Tom Ward <[email protected]>

Allow authorization codes to be granted with a custom authorization length

c6db23e7f030c8b8500532667947d7cbfc1b7217 authored almost 14 years ago by Tom Ward <[email protected]>

Use latest mongoid version for testing, and be explicit about the versions of bson and bson_ext used

f015f08d62ab84e2631ae33b02f5cececa0e8ded authored almost 14 years ago by Tom Ward <[email protected]>

Be explicit when stating mongoid foreign keys, as different versions of mongoid determine them differently

3eac1ef723466309fb2d6d7641a0f6dd3e8792ea authored almost 14 years ago by Tom Ward <[email protected]>

Updated version to 0.0.10

d7e5b80c34a812ebaf9446c63a6656d75af8e9db authored almost 14 years ago by Tom Ward <[email protected]>

Move default token lifespan into token expiry module, allowing it to be overridden by apps if required

169ca9c181ebc263d1cda37d5892b0d057c9fb78 authored almost 14 years ago by Tom Ward <[email protected]>

Move request authentication out of rails filter and into mediator, so it may be reused by other frameworks

07a59026f3671edf5fc40f0a90226cca65112226 authored almost 14 years ago by Tom Ward <[email protected]>

Requests should not be invalid if the same token is provided as both a header and parameter.

While technically the request is invalid, some client libraries (such as the ruby OAuth2 gem) al...

6eaba8389c53276f55bc49883101526d6c2e87a5 authored almost 14 years ago by Tom Ward <[email protected]>

Released version 0.0.9

3317f9cf87401f98c711a1cde4cd7a214e978c31 authored about 14 years ago by James Adam <[email protected]>

Bumping version.

184fa1acc7867167e984dbcad5d4436acdd8b8cf authored about 14 years ago by James Adam <[email protected]>

There's nothing Rails-specific in these helpers.

99360d1ffa901909ab84a0d51aee7b4618cb3830 authored about 14 years ago by James Adam <[email protected]>

Released version 0.08

25e22904b838919fa2ecc328f9f0a580da8eb9ec authored about 14 years ago by Tom Ward <[email protected]>

Don't let warden fiddle with our responses!

ea4a3790ebfcd71ba2ea9e8edd48a0addacfc5e0 authored about 14 years ago by Tom Ward <[email protected]>

Try and make request authentication spec a little bit clearer by renaming actions and spec name

6ab02aa836a6f87eb287dead25bc9d6aadedf70c authored about 14 years ago by Tom Ward <[email protected]>

Reduce authorization code lifetime to 1 minute

1332f2082274a0773cd9b3ea96f665b1bae14f05 authored about 14 years ago by Tom Ward <[email protected]>

Use macro to test authenticate headers and statuses

47295a33b179fc1260ab5eea0a01649ac6d9e261 authored about 14 years ago by Tom Ward <[email protected]>

As of draft 11 of the spec, expired_token has been removed

4cce52f82b16ea94109b397470f0e4e5c998f66b authored about 14 years ago by Tom Ward <[email protected]>

Update WWW-Authenticate challenge to match new format from draft 11 of the spec

112d8f4c0fe27feab72a2f120d90185b3ce2ff10 authored about 14 years ago by Tom Ward <[email protected]>

Refresh with should always fail if the token is nil

7bbe64a65612a5ca493cb49a34551b43da6d50c0 authored about 14 years ago by Tom Ward <[email protected]>

An access token shouldn't be refreshable if its authorization has expired

da44d4ad358f80ffa8a08d33561390cec1ddc863 authored about 14 years ago by Tom Ward <[email protected]>

Use Behaviour module trick in mongoid as well as activerecord backends

72f1d00a94f344424cfae23e4ff928914cda0edd authored about 14 years ago by Tom Ward <[email protected]>

Rename access grant to authorization to avoid confusion with terminology in the spec

Draft 11 of the spec (published 1st December) uses access grant only for intermediate authentica...

a0cba3ab5f4e7c7cecf92f3e53dcc447101e87ad authored about 14 years ago by Tom Ward <[email protected]>

Move shared model code into top level models folder, to allow for clearer documentation

4f8a39f861cee7357b0921f23111049302218ce9 authored about 14 years ago by Tom Ward <[email protected]>

Release version 0.0.7

099a394b4c746ca1d65a6c77b711810f8abac7ca authored about 14 years ago by Tom Ward <[email protected]>

Use dedicated request object to mediate authorization code requests.

This has massively reduced the rails specific authorization code support, which should make addi...

770128e6dc404d88e9432512e5ebaaf0d8f1e2ac authored about 14 years ago by Tom Ward <[email protected]>

Move some of the authorization code support into the mediator (and out of the rails helper)

I think it should be possible to go much further than this, perhaps by introducing a new 'mediat...

c5f0770be966a510878bc9402da5b08e4093d4fc authored about 14 years ago by Tom Ward <[email protected]>

Change rails support to build authorization codes as well as grant and deny them

8ecb1039bdd1d02de22896db8db7aab93bce7311 authored about 14 years ago by Tom Ward <[email protected]>

Throw responses back to middleware

72df57421d367bcb5e68517aa815ecf663a45919 authored about 14 years ago by Tom Ward <[email protected]>

Small changes to get it working with our other project

4be3250784f7cc4173034c5abee61cc0b7a18239 authored about 14 years ago by Tom Ward <[email protected]>

Rails isn't a dependency, only activesupport is

607ea10f06ca1e33bda6a8e9965ed24d3ffc3ebb authored about 14 years ago by Tom Ward <[email protected]>

To allow custom class names, the backend must be activated after all of the configuration has been set

18cf16eb9070cb08c3b87c332f952c17dae5bed6 authored about 14 years ago by Tom Ward <[email protected]>

Only require rails support when rails defined, and provide a configure method to setup library outside rails

8c18851112fafd6add2142b40ae795c4a62908e6 authored about 14 years ago by Tom Ward <[email protected]>

Released version 0.0.6

23628be6516769f015b62700f292be64f790e3f3 authored about 14 years ago by Tom Ward <[email protected]>

Move common responses into a Responses module

7160322fcdfdcdc516e662c9c90e0406a8cbb4d6 authored about 14 years ago by Tom Ward <[email protected]>

Using a single piece of middleware seems cleaner, and generating responses in the mediator simplifies the code

8138db654de6940c9abd63d33af6e28b2a87bfa6 authored about 14 years ago by Tom Ward <[email protected]>

Use access_grant rather than access_token in mediator

d9cb2e511801a5d8a854a073119ead8cbe90e568 authored about 14 years ago by Tom Ward <[email protected]>

Start process of simplifying authentication handler

22441e5fd63d3adfd77377d4fe3728daac1738d6 authored about 14 years ago by Tom Ward <[email protected]>

Use resource_owner rather than account to refer to the resource owner

1c86e22033cfc1a24d87bc3611a6088f8633bd09 authored about 14 years ago by Tom Ward <[email protected]>

Add sdoc to generate documentation. Perhaps this will encourage some actual documentation from me.

9f8bdf3a9ff6386ecc7b81461afaea4cd6fbef47 authored about 14 years ago by Tom Ward <[email protected]>

All clients should have a name

76cefdb751c2d8ddcc7aa967830cedc52a68e7b4 authored about 14 years ago by Tom Ward <[email protected]>

Run specs against both the mongoid and activerecord backends

0be1f430b46d51a2a812392bea16a66fe390dfd7 authored about 14 years ago by Tom Ward <[email protected]>

Remove unused TestTask

44930a14c7be2e72785f487f72f8a16f3e92e022 authored about 14 years ago by Tom Ward <[email protected]>

Release version 0.0.5

23c805197ec6eccf67aa89a8f40c3cf09e119d7c authored about 14 years ago by Tom Ward <[email protected]>

Intercept all requests to /oauth/access_token, responding with 405 if the method isn't POST

2c0f747ff180991aeb337ef7a3e917ebb589d0bb authored about 14 years ago by Tom Ward <[email protected]>

Include 'correct' responses when bad authorization code requests are made

01a671ab19bc95a8f2437ddb7684d12481bf0667 authored about 14 years ago by Tom Ward <[email protected]>

More ActiveRecord explicitness is a good thing

5e76eacfdf300b97926492a7bcf3aa412ae0255f authored about 14 years ago by Tom Ward <[email protected]>

Move common rack code to common middleware and request classes

dd7173fb5907f25c88d025637addbb716b187d9e authored about 14 years ago by Tom Ward <[email protected]>

Release version 0.0.4

fd26f79e6d2c0c9b92d0fd33576fab39425d9338 authored about 14 years ago by Tom Ward <[email protected]>

Be more explicit when setting up activerecord relationships, and provide a temporary way to access the account through the mediator

d9700a5d23348f4197764d8796030f2b755966b9 authored about 14 years ago by Tom Ward <[email protected]>

Use a module for ActiveRecord model behaviour.

This allows users of the gem to include the behaviour in their own classes, without having to su...

23628ae7b8e448ef587255a4739e9a0bd0c48303 authored about 14 years ago by Tom Ward <[email protected]>

Update version to 0.0.3

daa5ce11c9f36a83ab47646858a2bf0be925140e authored about 14 years ago by Tom Ward <[email protected]>

Fix broken mongoid and active record configuration

52f3991165069808a04e71f8ba4f34c8a3422605 authored about 14 years ago by Tom Ward <[email protected]>

Minor point release, for integration back into Hashblue.

31080b4a29e5d1677e1e0ff472e43246a525acd6 authored about 14 years ago by Tom Ward <[email protected]>

Remove mongoid specific model test. To run mongoid tests, use BACKEND=mongoid rake spec.

990fc32b41142c7a7e7e1a460d537d2250e97d6b authored about 14 years ago by Tom Ward <[email protected]>

Move rails specific code under Rails namespace

648a0b25d9db3fbb12aa087af2d162b16bef5144 authored about 14 years ago by Tom Ward <[email protected]>

Move rack stuff under rack

7e2f4c4373a3e67fc5221b46fed8f261f3db2cdf authored about 14 years ago by Tom Ward <[email protected]>

Move token expiry under models/shared

eff75369d7878ef21577e3e36b372f87c0d6bad1 authored about 14 years ago by Tom Ward <[email protected]>

In the absence of any better idea, return error codes for insufficient scope and invalid requests as json (which can easily be expanded with description, etc)

cbed4a935ca10537de3c283756afb4f7c3e3ef9b authored about 14 years ago by Tom Ward <[email protected]>

Move granting of access tokens to Rack Middleware

6d92e5c8596672953b1d54f044356cd5f26174bf authored about 14 years ago by Tom Ward <[email protected]>

Use a request test rather than middleware test for access tokens controller, to ensure Rack middleware comes into play

d7d6af23286b22dbc54c0d4343843330507b6f1c authored about 14 years ago by Tom Ward <[email protected]>

Remove errant p

4f47ec45ae0631019ee952386e5ef1fdc4686bf5 authored about 14 years ago by Tom Ward <[email protected]>

Use sane mongo collection names by default

1a358022c67599ca2089730dfd45c3c39d538e73 authored about 14 years ago by Tom Ward <[email protected]>

Move routing into specs where routing required

2b08fb086159e2940c351cc22a81ff0a99caee27 authored about 14 years ago by Tom Ward <[email protected]>

Move backend configuration into backend modules

39178436cfeec226a4120e55ca9b55e99770a3a9 authored about 14 years ago by Tom Ward <[email protected]>

Initial draft of a mongoid backend. Still lots of loose edges.

The way in which backends are chosen is clunky, and the mongoid code is surely less than ideal. ...

3e0ca96c36b1aedd83a5fad03b51e4ff9f94d087 authored about 14 years ago by Tom Ward <[email protected]>

Use symbols when merging with valid params. Symbols should be used throughout.

d60f9ce96ce70f66a85a5155327bc2be6510bd5e authored about 14 years ago by Tom Ward <[email protected]>

Move non-ActiveRecord specific model behaviour into shared modules for each model

a7d7e1e896a506b61519c2db2b8e2711d0ccdd3e authored about 14 years ago by Tom Ward <[email protected]>

Move models under Models::ActiveRecord, to make space for different backends.

b391c155a0ea76a6aa080da03804979ec5fe94a9 authored about 14 years ago by Tom Ward <[email protected]>

Split the rollercoaster if/else that made up the middleware into some simpler, shorter methods.

Looking at the code, it almost seems as though the Mediator is now (or could now be) be merged i...

57baf365702e35f830080c5a992d65753b7be6ba authored about 14 years ago by Tom Ward <[email protected]>

Renamed Core => Mediator, as it seems to better describe its role

1b84ea26d53fe326d93d26771593aaf3486ff112 authored about 14 years ago by Tom Ward <[email protected]>

Last piece of authentication code moved into rack middleware.

We're now left with a middleware method almost too horrible to look at, but it gives us somethin...

0c14b7719ec1c74e3af7568aa081186aefd29ec6 authored about 14 years ago by Tom Ward <[email protected]>

Move more functionality to the rack middleware, requesting authentication if none has been provided

b6f75535d64428ec606209670b4731a7474bb40e authored about 14 years ago by Tom Ward <[email protected]>

Move main authentication flow (in a scrappy way) into middleware

72ff2fd747b376573108839b45dcf9672f22dc2d authored about 14 years ago by Tom Ward <[email protected]>

Move handling of bad requests (where token provided both in header and as a param) to middleware

4494a05fa4e002619c0c0d937c17d03215afc3ef authored about 14 years ago by Tom Ward <[email protected]>

Ignore test.db

92705a07ea97ea4b4e85fadede58c7c0f5e18bd5 authored about 14 years ago by Tom Ward <[email protected]>

Setup OAuth2 Core in middleware, and ensure authentication tests run through middleware (and hence can use core class)

ee926d4aec87dc004d506b3cd2bf187a16614917 authored about 14 years ago by Tom Ward <[email protected]>

Introduce a 'core' object to control oauth2 authentication.

The goal is to expand this object to provide or proxy more behaviour, eventually moving some beh...

51dd56627defbdf9b6d20aba67b2587f190a563e authored about 14 years ago by Tom Ward <[email protected]>

Allow requests to be blocked if the access token doesn't grant the required scope

a4ab95aede78a988973ccaec361e19cb4469f90c authored about 14 years ago by Tom Ward <[email protected]>

Allow an access grant to be revoked, destroying itself and any related access tokens and authorization codes

141b9ba366192a7ee0b38dbe312949bfad1852bc authored about 14 years ago by Tom Ward <[email protected]>

Respect access grant expiry when creating and refreshing access tokens

06ba9fb5619770108b9d177fe0a687c5aaf25fa0 authored about 14 years ago by Tom Ward <[email protected]>

Introducing an access grant model means that client, account and scope information doesn't have to be copied from code to token to refreshed token.

6819293f9ed317e68cb9c2e76fcdf874fb79f023 authored about 14 years ago by Tom Ward <[email protected]>

Ignore built gems

821e4f68b0c16845ce8c39d6871882f44704ca3b authored about 14 years ago by Tom Ward <[email protected]>

Released version 0.0.1

16890c25a031bd73b5e904b5432ebf5d8cc17669 authored about 14 years ago by Tom Ward <[email protected]>

Add 'tag' task to Rakefile, allowing versions to be tagged and released

98a7cf1db0161f781b8b522d0fecee29f1bb7ecf authored about 14 years ago by Tom Ward <[email protected]>

First draft towards a refresh token implementation. Not sure you should be able to refresh tokens ad infinitum.

9ba575a72ef0df8fe20e639303dc580564fb1b19 authored about 14 years ago by Tom Ward <[email protected]>

Allow querying of access tokens and authorization codes as to whether they have a given scope

e2c483c7141ca25967146120410e5fb479b5b26c authored about 14 years ago by Tom Ward <[email protected]>

When no oauth token is passed, respond with status 401 and an OAuth authorization challenge

3b6f60a6f7e3f6a7554ffcef8fa348f7b2ebc248 authored about 14 years ago by Tom Ward <[email protected]>

Not all clients are allowed to use all oauth grant types

02032d1a556c7ccf90c886a00f3ee8d5ece54069 authored about 14 years ago by Tom Ward <[email protected]>

Access tokens should still be grantable when using a custom client class

b97358872d67eb0bc634a78234ddfeb0f5856e44 authored about 14 years ago by Tom Ward <[email protected]>

Requests should be invalid if an oauth_token is provided in both a parameter and header

026fa36dfc3b81294f2238c51b5fc1fc11d3f456 authored about 14 years ago by Tom Ward <[email protected]>

We're using the password grant type here, not authorization code

dd4c8b0e58179a9d7e1f51ea1343f5419507e41c authored about 14 years ago by Tom Ward <[email protected]>

Access tokens and authorization codes aren't valid without an associated client

5d0f5d3072ee033bf23f3e6c2270d428ddbd9e80 authored about 14 years ago by Tom Ward <[email protected]>

Move common token expiry functionality into dedicated module

85a5d50487d6fa475590e4663bcb42067217961a authored about 14 years ago by Tom Ward <[email protected]>

Move token role management (such that it is) into its own module

9421f975717596b2bf68e19415d539149f2a06a9 authored about 14 years ago by Tom Ward <[email protected]>

Ensure warden is bypassed when authentication fails.

aed02f7043f98bc7da66588a96fdb348f64c7976 authored about 14 years ago by Tom Ward <[email protected]>

Remove Warden as a development dependency

aa3c176cc0a4e8c6de5dae76fe134749ef37dae8 authored about 14 years ago by Tom Ward <[email protected]>

Regenerated gemspec and added placeholder README

c40c3cdd9e4eece85d2c0572dcc2d112c0ae9f07 authored about 14 years ago by Tom Ward <[email protected]>