2163 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Andrew Millington	00a7972f74	Merge remote-tracking branch 'upstream/master'	2018-02-28 19:45:41 +00:00
Andrew Millington	e3266cb50a	Fix changelog categorisation	2018-02-26 20:08:02 +00:00
Andrew Millington	2fdd6ce494	Add change for access and refresh token emitters	2018-02-26 20:07:02 +00:00
Andrew Millington	6fd3024c48	Merge pull request #860 from Zaszczyk/new-events-to-emitter-#825 ... Add new event types: access_token_issued and refresh_token_issued.	2018-02-26 20:01:22 +00:00
Andrew Millington	62e06b7d3a	Removing Yoda condition ... Removed Yoda condition from code base	2018-02-26 19:51:03 +00:00
Simon Hamp	009c109716	TravisCI fix for PHPStan	2018-02-26 16:04:48 +00:00
Simon Hamp	6723aadfe8	Fix #837 ... Unifies how we fetch the client_id from the request and allows us to throw a more appropriate exception when the client_id parameter is missing. Improves the test method for this validation by checking the culpable method in this particular case. The test was missing this by calling the wrong method.	2018-02-26 15:56:28 +00:00
Andrew Millington	e24964af07	Update changelog ... Add removal of paragone/random_compat to changelog	2018-02-26 12:57:11 +00:00
Andrew Millington	99e42f6f25	Remove paragonie/random_compat ... Removing paragonie/random_compat as no longer supporting PHP 5.x branches	2018-02-26 12:38:31 +00:00
Mateusz Błaszczyk	6700b113a8	Add new event types: access_token_issued and refresh_token_issued.	2018-02-23 17:48:51 +01:00
Andrew Millington	28e1418f64	Change to use correct release date for version 7	2018-02-18 20:29:37 +00:00
Andrew Millington	456c6cfdd2	Merge pull request #854 from Sephster/master ... Version 7	2018-02-18 15:57:10 +00:00
Andrew Millington	4f68d2a5f2	Fix release tags in changelog	2018-02-18 15:51:41 +00:00
Andrew Millington	49f66866f7	Fix links for versions 6.0.1 - 6.0.2	2018-02-18 15:38:28 +00:00
Andrew Millington	028d91f670	Add code coverage for scrutinizer	2018-02-18 15:33:41 +00:00
Andrew Millington	9287f587fc	Update changelog link	2018-02-18 15:29:59 +00:00
Andrew Millington	70396bec67	Chang Changelog format	2018-02-18 15:28:28 +00:00
Andrew Millington	6679418436	Update readme and changelog	2018-02-18 14:20:37 +00:00
Andrew Millington	e04b8f4e6d	Merge pull request #744 from erickjth/fix-pkce-implementation ... Fix PKCE implementation with strict verifications	2018-02-18 14:10:08 +00:00
Andrew Millington	e0cc5ee1b0	Merge branch 'master' of https://github.com/thephpleague/oauth2-server into fix-pkce-implementation	2018-02-18 13:57:19 +00:00
Andrew Millington	b78c012796	Change code challenge and verifier to be constants in test	2018-02-18 13:51:34 +00:00
Andrew Millington	bcd2fc38c0	Merge pull request #853 from thephpleague/analysis-zGNlb2 ... Apply fixes from StyleCI	2018-02-17 20:02:03 +00:00
Andrew Millington	25c3c216a0	Apply fixes from StyleCI	2018-02-17 19:31:59 +00:00
Andrew Millington	8bbb20a012	Merge pull request #852 from lookyman/updated-dependencies ... Updated dependencies, more strict static analysis	2018-02-17 17:27:58 +00:00
Lukáš Unger	cd5233392e	Updated dependencies, more strict static analysis	2018-02-17 18:07:16 +01:00
Andrew Millington	7a6c35bc29	Merge pull request #849 from lookyman/phpunit-version ... Update PHPUnit, run static analysis on tests	2018-02-17 16:28:41 +00:00
Andrew Millington	8614aea887	Revert "Remove temp variables and @var comments" ... This reverts commit 7a5c511807.	2018-02-17 16:27:41 +00:00
Andrew Millington	7a5c511807	Remove temp variables and @var comments	2018-02-17 16:15:48 +00:00
Andrew Millington	e0b65a2831	Set default mustValidateSecret to true	2018-02-17 11:46:47 +00:00
Andrew Millington	ee7d52ecaa	Merge pull request #607 from lucadegasperi/patch-5 ... Make ClientRepositoryInterface more flexible	2018-02-17 11:42:48 +00:00
Alex Bilbie	7d1d88cdf1	Merge pull request #850 from weirdan/patch-1 ... Fixed docblock opener	2018-02-12 10:54:26 +00:00
Bruce Weirdan	80a949601f	Fixed docblock opener ... It's important for tools relying on docblock types to perform static analysis (think phan, phpstan, psalm, etc)	2018-02-12 12:36:59 +02:00
Andrew Millington	fea577f25b	Merge pull request #719 from stratoss/stratoss-patch-exeption ... Getter and setter for the payload and ability to pass options to json_encode	2018-02-11 22:48:23 +00:00
Lukáš Unger	1f87c7a7be	Update PHPUnit, run static analysis on tests	2018-02-11 23:22:46 +01:00
Andrew Millington	3098f6d7fa	Merge pull request #839 from simesy/master ... Allow other secure key permissions.	2018-02-11 22:17:35 +00:00
Andrew Millington	06a23a1dd0	Update CryptKey.php ... Change the error message to reflect that the server will also accept 440 and 400 as a valid file permission	2018-02-11 22:12:55 +00:00
Alex Bilbie	97089ad49e	Merge pull request #848 from lookyman/static-analysis ... Static analysis with PHPStan	2018-02-11 21:24:52 +00:00
Lukáš Unger	eca385ab08	Static analysis with PHPStan	2018-02-11 22:20:17 +01:00
Andrew Millington	ef06c29ee8	Merge pull request #840 from liverbool/master ... BUGFIX: Wrong redirect uri.	2018-02-11 20:20:41 +00:00
Andrew Millington	5fb9fc929a	Reinstate check on client redirect URI to fail if multiple redirect URIs have been listed for the client and one has not been specified in the auth request	2018-02-11 20:10:01 +00:00
Andrew Millington	4c548dbd78	Merge pull request #847 from Sephster/master ... Minor Coding Standard Fixes	2018-02-11 19:01:12 +00:00
liverbool	b3cd73cac7	code cleaner ... cc. Co-Authored-By: Andrew Millington <sephster@users.noreply.github.com>	2018-02-09 05:54:05 +07:00
Andrew Millington	3999c41fef	Merge pull request #845 from kpn13/master ... Do not create key file if it already exists and it is the same	2018-02-06 12:32:29 +00:00
Erick Torres	ce2662ece7	Merge branch 'master' of github.com:thephpleague/oauth2-server into fix-pkce-implementation ... # Conflicts: # tests/Grant/AuthCodeGrantTest.php	2018-02-05 15:32:15 -05:00
Karim PINCHON	d2641b560d	Do not create key file if it already exists and it is the same	2018-01-29 11:05:10 +01:00
Andrew Millington	8bbd218856	Merge pull request #842 from sgomez/fix-challenge-pkce ... Fix S256 code challenge method	2018-01-25 23:16:15 +00:00
Andrew Millington	eb9cde5ab7	Merge pull request #805 from raarts/Accept-RSA-key-with-crlf-v2 ... Also accept an RSA key with crlf	2018-01-23 22:24:52 +00:00
Sergio Gómez	1b692e2298	Fix S256 code challenge method ... According to [RFC7636#section-4.3](https://tools.ietf.org/html/rfc7636#section-4.3): If the "code_challenge_method" from Section 4.3 was "S256", the received "code_verifier" is hashed by SHA-256, base64url-encoded, and then compared to the "code_challenge", i.e.: BASE64URL-ENCODE(SHA256(ASCII(code_verifier))) == code_challenge So, the hash must be done before the base64_encode. The tests are modified to use example data from the [RFC7636#appendix-B](https://tools.ietf.org/html/rfc7636#appendix-B).	2018-01-18 05:31:44 +01:00
liverbool	d22f222e65	BUGFIX: Wrong redirect uri. ... This's bugfix when redirect on error.	2018-01-13 11:52:31 +07:00
Simon Hobbs	cf9acb32b8	Allow some more secure options without tsk-tsk.	2018-01-13 15:29:42 +11:00