74 Commits

Author	SHA1	Message	Date
Andrew Millington	369c7005a3	Merge master into version 8 branch	2018-06-24 01:10:02 +01:00
Ilya Bulah	a31bc7d4cc	Extract validateRedirectUri()	2018-06-14 23:50:58 +03:00
Ilya Bulah	0d20c755d4	Formatting	2018-06-14 23:50:58 +03:00
Andrew Millington	61156ef8c7	Use __toString() for access token	2018-05-23 16:34:39 +01:00
Andrew Millington	4aeb92aa98	Merge remote-tracking branch 'upstream/8.0.0' into access-token-jwt	2018-05-21 16:18:24 +01:00
Andrew Millington	33ce849617	Add tests for invalid client exception	2018-05-13 17:29:07 +01:00
Andrew Millington	48ce5f36cf	Change function name to be less technically specific	2018-05-07 20:37:20 +02:00
Lukáš Unger	fd72d79ad3	Generalized access token format	2018-05-07 20:37:20 +02:00
Andrew Millington	27323b5c9a	Fix spacing issue	2018-04-21 21:31:48 +01:00
Andrew Millington	80bc291c51	Added null checks before calling set functions	2018-04-21 21:29:21 +01:00
Andrew Millington	25c3c216a0	Apply fixes from StyleCI	2018-02-17 19:31:59 +00:00
Lukáš Unger	cd5233392e	Updated dependencies, more strict static analysis	2018-02-17 18:07:16 +01:00
Andrew Millington	5fb9fc929a	Reinstate check on client redirect URI to fail if multiple redirect URIs have been listed for the client and one has not been specified in the auth request	2018-02-11 20:10:01 +00:00
liverbool	b3cd73cac7	code cleaner ... cc. Co-Authored-By: Andrew Millington <sephster@users.noreply.github.com>	2018-02-09 05:54:05 +07:00
liverbool	d22f222e65	BUGFIX: Wrong redirect uri. ... This's bugfix when redirect on error.	2018-01-13 11:52:31 +07:00
Andrew Millington	8c93fd74c9	Merge pull request #573 from ismailbaskin/master ... Include redirect_uri check on authorization endpoint	2017-11-19 20:57:27 +00:00
Sephster	7878cf9c13	Merge remote-tracking branch 'upstream/master'	2017-11-13 23:52:36 +00:00
Sephster	c895885700	Modify grants so only auth requests use default scopes	2017-11-13 22:19:44 +00:00
Andrew Millington	0f08063864	Fixed use of default scope so it is only for authorization requests	2017-11-06 22:33:28 +00:00
Luca Santarella	a4fc05c31e	Fixed indentation in comment to match code style	2017-10-25 18:33:54 -04:00
Luca Santarella	825017f27e	Ability to specify query delimiter, such as ? instead of the hard-coded #	2017-10-25 18:30:17 -04:00
Andrew Millington	63861704b6	Merge pull request #749 from dmelo/issue-748 ... Replaces array_key_exists by isset, which is faster, on ImplicitGrant.	2017-10-20 18:28:18 +01:00
Diogo Oliveira de Melo	203be5ca20	Revert comparison order, as suggested by @Sephster	2017-10-20 09:23:36 -02:00
Andrew Millington	c996b66528	Add means to set default scopes for grants	2017-10-18 22:08:41 +01:00
Diogo Oliveira de Melo	170ce2fd2d	Replaces array_key_exists by isset, which is faster, on ImplicitGrant.	2017-06-30 15:42:23 -03:00
Dave Marshall	83228bdcd5	Change case for implict grant token_type	2017-03-27 12:11:25 +01:00
Alex Bilbie	b1bfff7325	Don't pass in user because we don't know who user is	2016-09-19 10:05:55 +01:00
Alex Bilbie	11ccc305d0	Applied fixes from StyleCI	2016-09-13 14:17:09 +00:00
Alex Bilbie	d7df2f7e24	Fix for #650	2016-09-13 15:16:58 +01:00
Lukáš Unger	c874c59b9c	Explicitly compare to false when checking not instanceof	2016-07-09 12:09:21 +02:00
Lukáš Unger	c3a4670c11	Updated PHPDoc	2016-07-09 02:01:53 +02:00
Alex Bilbie	5ee1583c5b	Ensure state is in access denied redirect. Fixes #597	2016-06-28 09:03:01 +01:00
İsmail BASKIN	9a58bc15f6	Include redirect_uri check on authorization endpoint on implicit grant	2016-05-07 17:44:02 +03:00
Alex Bilbie	cf63403585	Merge branch 'master' of github.com:thephpleague/oauth2-server	2016-05-04 08:56:04 +01:00
Alex Bilbie	cdf43e498e	Use constant for event name instead of explicit string. Fixes #563	2016-05-04 08:55:57 +01:00
Lee	0bb968f413	Fixed typo in exception string	2016-05-04 15:13:48 +08:00
Alex Bilbie	143a2e32f7	Client may return an array of redirect URIs	2016-04-18 12:21:42 +01:00
Alex Bilbie	8f418cff08	Added missing state parameter in redirect response	2016-04-18 12:19:54 +01:00
Alex Bilbie	fcec1f3442	Cody tidy	2016-04-18 12:19:36 +01:00
Alex Bilbie	fb8f47e868	Added $mustValidateSecret parameter to ClientRepositoryInterface:: getClientEntity(). Fixes #550	2016-04-18 08:32:49 +01:00
Alex Bilbie	f007e25070	Added copyright docblocks	2016-04-17 13:06:05 +01:00
Alex Bilbie	94a1c18fa9	Implict grant does not return return refresh tokens	2016-04-17 12:12:49 +01:00
Alex Bilbie	92a483b3bd	Improved tests	2016-04-10 16:14:01 +01:00
Alex Bilbie	7c86d3b848	Merge branch 'V5-authorization-request-flow' of github.com:thephpleague/oauth2-server into V5-authorization-request-flow	2016-04-10 14:31:25 +01:00
Alex Bilbie	e24dff2723	Fixed expires_in	2016-04-10 14:30:44 +01:00
Alex Bilbie	1512960d92	Applied fixes from StyleCI	2016-04-10 09:23:10 -04:00
Alex Bilbie	273ea0ba68	Updated implicit grant to use the new auth request flow	2016-04-10 14:22:56 +01:00
Alex Bilbie	a0c4900ee7	Client is not required here because of finalizeScopes method	2016-04-10 13:53:16 +01:00
Alex Bilbie	b7064befe4	Checkin	2016-04-10 10:07:08 +01:00
Alex Bilbie	c6faa228fe	Updated references to interfaces	2016-04-09 15:25:45 +01:00