Alex Bilbie
0b061e3086
Refresh token is encrypted payload now instead of JWT
2016-01-14 23:47:06 +00:00
Alex Bilbie
936b8f93ec
Addititonal refresh token validation
2016-01-13 00:38:23 +00:00
Alex Bilbie
79791e5848
Code tidy
2016-01-13 00:13:34 +00:00
Alex Bilbie
eef5cf39d4
Fixes to refresh grant
2016-01-13 00:12:10 +00:00
Alex Bilbie
6fb3fb5110
Updated refresh token grant
2016-01-12 23:53:03 +00:00
Alex Bilbie
3135f1796e
Generate a refresh token in password grant
2016-01-12 23:05:19 +00:00
Alex Bilbie
d565665ccb
Code tidy
2016-01-12 23:05:07 +00:00
Alex Bilbie
de89a6bc89
Code tidy
2016-01-12 23:03:38 +00:00
Alex Bilbie
758471ec16
Fixed docblock
2016-01-12 22:59:00 +00:00
Alex Bilbie
e7e4892408
Fixed method parameter name
2015-11-16 12:58:38 +00:00
Alex Bilbie
46648f3e80
Updated password grant
2015-11-16 12:58:11 +00:00
Alex Bilbie
32b451aa21
Updates
2015-11-13 17:41:05 +00:00
Alex Bilbie
82413513e8
Checkin
2015-10-14 09:51:53 +01:00
Alex Bilbie
90d18c553d
Broke expiration DateTime out into seperate variable for readability
2015-04-06 08:13:41 +01:00
Alex Bilbie
a15995c126
First commit of updated auth code grant
2015-04-05 21:57:29 +01:00
Alex Bilbie
6a78d53d03
Updated grants
2015-04-05 21:10:41 +01:00
Alex Bilbie
d63efc8dbf
Updated grant type interface
2015-04-05 17:05:57 +01:00
Alex Bilbie
f964fd2962
Updated abstract grant and client credentials grant
2015-04-05 17:01:19 +01:00
Alex Bilbie
282bb20cc8
Fix docblocks + method name
2014-12-27 23:00:11 +00:00
Dave Walker
851c7c0eb1
Per the spec:
...
The authorization server MAY issue a new refresh token, in which case
the client MUST discard the old refresh token and replace it with the
new refresh token. The authorization server MAY revoke the old
refresh token after issuing a new refresh token to the client. If a
new refresh token is issued, the refresh token scope MUST be
identical to that of the refresh token included by the client in the
request.
This commit allows users to specifiy the time before the Refresh Token
expire time to issue a new Refresh Token.
alter method names, naming convention(?)
2014-12-21 18:51:52 -05:00
Regan
d32bfaa757
Prevent duplicate session in auth code grant
...
The session already exists in the database, so we don't need to save it again. Doing so results in the session used for the auth code hanging around in the database with nothing associated to it, while the access token is associated to a new session caused by the `save()` method creating a duplicate. Fixes #266 .
2014-12-15 15:09:36 +13:00
Graham Campbell
a1726903b5
CS fixes
2014-12-10 13:10:35 +00:00
Alex Bilbie
f8b61b47b9
Ensure Refresh Token Entity hasn't expired
2014-12-03 23:22:14 +00:00
Alex Bilbie
b8331d12e4
Syntax improvements
2014-12-03 23:21:54 +00:00
Alex Bilbie
e1c0ff2685
Code coverage improvements in grant classes
2014-11-23 23:32:50 +00:00
Alex Bilbie
cfada388db
Declared methods from AbstractGrant on GrantTypeInterface as per #255
2014-11-21 00:06:01 +00:00
Alex Bilbie
bed6c3287e
Spelling fixes
2014-11-20 23:53:14 +00:00
Alex Bilbie
f83e5a8731
Learnt how to spell delimiter
2014-11-20 23:52:29 +00:00
Brooke Bryan
6a1f927a6c
Check refreshToken isset before attempting to call methods on it
2014-11-13 12:20:59 +00:00
Brooke Bryan
b2c0933ee6
Docbloc improvements
2014-11-12 18:10:29 +00:00
Graham Campbell
4c1cd04a24
CS fixes
2014-11-08 18:26:12 +00:00
Alex Bilbie
6b29b7450e
If the client should redirect during AuthCodeGrant authorisation then provide a redirect uri
2014-11-08 17:03:15 +00:00
Alex Bilbie
b9debaab26
Fix #231
2014-11-08 16:44:39 +00:00
Alex Bilbie
3815355489
Removed generic getStorage method and replaced with distinct calls to getters
2014-11-07 02:20:06 +00:00
Alex Bilbie
9bb7af6f83
More docblock fixes
2014-11-07 01:48:23 +00:00
Alex Bilbie
d16b1b72ba
Docblock fix
2014-11-07 01:36:17 +00:00
Alex Bilbie
e37289231d
Removed dead code
2014-11-07 01:36:12 +00:00
Alex Bilbie
17dfc897b4
Docfix
2014-11-07 01:30:54 +00:00
Alex Bilbie
7586e62da1
Dead code
2014-11-07 01:30:50 +00:00
Alex Bilbie
d23dc4d247
Docblock fixes
2014-11-07 01:25:13 +00:00
Alex Bilbie
293bc52972
Code declared in interface, not needed
2014-11-07 01:25:04 +00:00
Leevi Graham
b60693c5d6
Associate the $client with $session.
2014-11-07 07:50:22 +11:00
Alex Bilbie
136edf16c5
Fix #213
2014-09-30 23:55:21 +01:00
Alex Bilbie
536ef3244d
Inject the session into the token type
2014-09-30 22:28:49 +01:00
Alex Bilbie
a3f5d20592
Changed method names to be clearer that we're setting params
2014-09-30 22:28:38 +01:00
Alex Bilbie
b68a5c2abb
Added authentication failure events
2014-09-30 22:16:34 +01:00
pulkit
1ff3d1adda
support grant specific access token ttl
2014-09-11 13:58:01 +01:00
Alex Bilbie
7d8989a8cd
Fix #202
2014-08-18 16:47:36 +01:00
Alex Bilbie
522c7478c7
Fix #169
2014-08-06 09:53:47 +01:00
Alex Bilbie
0754b9ec75
Merge branch 'v4.0.0-relational-example' into v4.0.0-WIP
2014-08-06 09:02:54 +01:00