Andrew Millington 
							
						 
					 
					
						
						
							
						
						49f66866f7 
					 
					
						
						
							
							Fix links for versions 6.0.1 - 6.0.2  
						
						 
						
						
						
						
					 
					
						2018-02-18 15:38:28 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						028d91f670 
					 
					
						
						
							
							Add code coverage for scrutinizer  
						
						 
						
						
						
						
					 
					
						2018-02-18 15:33:41 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						9287f587fc 
					 
					
						
						
							
							Update changelog link  
						
						 
						
						
						
						
					 
					
						2018-02-18 15:29:59 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						70396bec67 
					 
					
						
						
							
							Chang Changelog format  
						
						 
						
						
						
						
					 
					
						2018-02-18 15:28:28 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						6679418436 
					 
					
						
						
							
							Update readme and changelog  
						
						 
						
						
						
						
					 
					
						2018-02-18 14:20:37 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						e04b8f4e6d 
					 
					
						
						
							
							Merge pull request  #744  from erickjth/fix-pkce-implementation  
						
						 
						
						... 
						
						
						
						Fix PKCE implementation with strict verifications 
						
						
					 
					
						2018-02-18 14:10:08 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						e0cc5ee1b0 
					 
					
						
						
							
							Merge branch 'master' of  https://github.com/thephpleague/oauth2-server  into fix-pkce-implementation  
						
						 
						
						
						
						
					 
					
						2018-02-18 13:57:19 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						b78c012796 
					 
					
						
						
							
							Change code challenge and verifier to be constants in test  
						
						 
						
						
						
						
					 
					
						2018-02-18 13:51:34 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						bcd2fc38c0 
					 
					
						
						
							
							Merge pull request  #853  from thephpleague/analysis-zGNlb2  
						
						 
						
						... 
						
						
						
						Apply fixes from StyleCI 
						
						
					 
					
						2018-02-17 20:02:03 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						25c3c216a0 
					 
					
						
						
							
							Apply fixes from StyleCI  
						
						 
						
						
						
						
					 
					
						2018-02-17 19:31:59 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						8bbb20a012 
					 
					
						
						
							
							Merge pull request  #852  from lookyman/updated-dependencies  
						
						 
						
						... 
						
						
						
						Updated dependencies, more strict static analysis 
						
						
					 
					
						2018-02-17 17:27:58 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Lukáš Unger 
							
						 
					 
					
						
						
							
						
						cd5233392e 
					 
					
						
						
							
							Updated dependencies, more strict static analysis  
						
						 
						
						
						
						
					 
					
						2018-02-17 18:07:16 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						7a6c35bc29 
					 
					
						
						
							
							Merge pull request  #849  from lookyman/phpunit-version  
						
						 
						
						... 
						
						
						
						Update PHPUnit, run static analysis on tests 
						
						
					 
					
						2018-02-17 16:28:41 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						8614aea887 
					 
					
						
						
							
							Revert "Remove temp variables and @var comments"  
						
						 
						
						... 
						
						
						
						This reverts commit 7a5c511807 . 
						
						
					 
					
						2018-02-17 16:27:41 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						7a5c511807 
					 
					
						
						
							
							Remove temp variables and @var comments  
						
						 
						
						
						
						
					 
					
						2018-02-17 16:15:48 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						e0b65a2831 
					 
					
						
						
							
							Set default mustValidateSecret to true  
						
						 
						
						
						
						
					 
					
						2018-02-17 11:46:47 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						ee7d52ecaa 
					 
					
						
						
							
							Merge pull request  #607  from lucadegasperi/patch-5  
						
						 
						
						... 
						
						
						
						Make ClientRepositoryInterface more flexible 
						
						
					 
					
						2018-02-17 11:42:48 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Alex Bilbie 
							
						 
					 
					
						
						
							
						
						7d1d88cdf1 
					 
					
						
						
							
							Merge pull request  #850  from weirdan/patch-1  
						
						 
						
						... 
						
						
						
						Fixed docblock opener 
						
						
					 
					
						2018-02-12 10:54:26 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bruce Weirdan 
							
						 
					 
					
						
						
							
						
						80a949601f 
					 
					
						
						
							
							Fixed docblock opener  
						
						 
						
						... 
						
						
						
						It's important for tools relying on docblock types to perform static analysis (think phan, phpstan, psalm, etc) 
						
						
					 
					
						2018-02-12 12:36:59 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						fea577f25b 
					 
					
						
						
							
							Merge pull request  #719  from stratoss/stratoss-patch-exeption  
						
						 
						
						... 
						
						
						
						Getter and setter for the payload and ability to pass options to json_encode 
						
						
					 
					
						2018-02-11 22:48:23 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Lukáš Unger 
							
						 
					 
					
						
						
							
						
						1f87c7a7be 
					 
					
						
						
							
							Update PHPUnit, run static analysis on tests  
						
						 
						
						
						
						
					 
					
						2018-02-11 23:22:46 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						3098f6d7fa 
					 
					
						
						
							
							Merge pull request  #839  from simesy/master  
						
						 
						
						... 
						
						
						
						Allow other secure key permissions. 
						
						
					 
					
						2018-02-11 22:17:35 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						06a23a1dd0 
					 
					
						
						
							
							Update CryptKey.php  
						
						 
						
						... 
						
						
						
						Change the error message to reflect that the server will also accept 440 and 400 as a valid file permission 
						
						
					 
					
						2018-02-11 22:12:55 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Alex Bilbie 
							
						 
					 
					
						
						
							
						
						97089ad49e 
					 
					
						
						
							
							Merge pull request  #848  from lookyman/static-analysis  
						
						 
						
						... 
						
						
						
						Static analysis with PHPStan 
						
						
					 
					
						2018-02-11 21:24:52 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Lukáš Unger 
							
						 
					 
					
						
						
							
						
						eca385ab08 
					 
					
						
						
							
							Static analysis with PHPStan  
						
						 
						
						
						
						
					 
					
						2018-02-11 22:20:17 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						ef06c29ee8 
					 
					
						
						
							
							Merge pull request  #840  from liverbool/master  
						
						 
						
						... 
						
						
						
						BUGFIX: Wrong redirect uri. 
						
						
					 
					
						2018-02-11 20:20:41 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						5fb9fc929a 
					 
					
						
						
							
							Reinstate check on client redirect URI to fail if multiple redirect URIs have been listed for the client and one has not been specified in the auth request  
						
						 
						
						
						
						
					 
					
						2018-02-11 20:10:01 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						4c548dbd78 
					 
					
						
						
							
							Merge pull request  #847  from Sephster/master  
						
						 
						
						... 
						
						
						
						Minor Coding Standard Fixes 
						
						
					 
					
						2018-02-11 19:01:12 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								liverbool 
							
						 
					 
					
						
						
							
						
						b3cd73cac7 
					 
					
						
						
							
							code cleaner  
						
						 
						
						... 
						
						
						
						cc.
Co-Authored-By: Andrew Millington <sephster@users.noreply.github.com > 
						
						
					 
					
						2018-02-09 05:54:05 +07:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						3999c41fef 
					 
					
						
						
							
							Merge pull request  #845  from kpn13/master  
						
						 
						
						... 
						
						
						
						Do not create key file if it already exists and it is the same 
						
						
					 
					
						2018-02-06 12:32:29 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Erick Torres 
							
						 
					 
					
						
						
							
						
						ce2662ece7 
					 
					
						
						
							
							Merge branch 'master' of github.com:thephpleague/oauth2-server into fix-pkce-implementation  
						
						 
						
						... 
						
						
						
						# Conflicts:
#	tests/Grant/AuthCodeGrantTest.php 
						
						
					 
					
						2018-02-05 15:32:15 -05:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Karim PINCHON 
							
						 
					 
					
						
						
							
						
						d2641b560d 
					 
					
						
						
							
							Do not create key file if it already exists and it is the same  
						
						 
						
						
						
						
					 
					
						2018-01-29 11:05:10 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						8bbd218856 
					 
					
						
						
							
							Merge pull request  #842  from sgomez/fix-challenge-pkce  
						
						 
						
						... 
						
						
						
						Fix S256 code challenge method 
						
						
					 
					
						2018-01-25 23:16:15 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						eb9cde5ab7 
					 
					
						
						
							
							Merge pull request  #805  from raarts/Accept-RSA-key-with-crlf-v2  
						
						 
						
						... 
						
						
						
						Also accept an RSA key with crlf 
						
						
					 
					
						2018-01-23 22:24:52 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Sergio Gómez 
							
						 
					 
					
						
						
							
						
						1b692e2298 
					 
					
						
						
							
							Fix S256 code challenge method  
						
						 
						
						... 
						
						
						
						According to [RFC7636#section-4.3](https://tools.ietf.org/html/rfc7636#section-4.3 ):
    If the "code_challenge_method" from Section 4.3 was "S256", the
    received "code_verifier" is hashed by SHA-256, base64url-encoded, and
    then compared to the "code_challenge", i.e.:
    BASE64URL-ENCODE(SHA256(ASCII(code_verifier))) == code_challenge
So, the hash must be done before the base64_encode.
The tests are modified to use example data from the
[RFC7636#appendix-B](https://tools.ietf.org/html/rfc7636#appendix-B ). 
						
						
					 
					
						2018-01-18 05:31:44 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								liverbool 
							
						 
					 
					
						
						
							
						
						d22f222e65 
					 
					
						
						
							
							BUGFIX: Wrong redirect uri.  
						
						 
						
						... 
						
						
						
						This's bugfix when redirect on error. 
						
						
					 
					
						2018-01-13 11:52:31 +07:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Simon Hobbs 
							
						 
					 
					
						
						
							
						
						cf9acb32b8 
					 
					
						
						
							
							Allow some more secure options without tsk-tsk.  
						
						 
						
						
						
						
					 
					
						2018-01-13 15:29:42 +11:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Alex Bilbie 
							
						 
					 
					
						
						
							
						
						92d8052a5b 
					 
					
						
						
							
							Merge pull request  #836  from knewzen/master  
						
						 
						
						... 
						
						
						
						remove codesponsor 
						
						
					 
					
						2018-01-04 20:09:23 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								knewzen 
							
						 
					 
					
						
						
							
						
						a3289c6ecb 
					 
					
						
						
							
							remove codesponsor  
						
						 
						
						
						
						
					 
					
						2018-01-05 01:08:14 +08:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								SunMar 
							
						 
					 
					
						
						
							
						
						292272d128 
					 
					
						
						
							
							Allow CryptTrait to accept a \Defuse\Crypto\Key as encryption key  #812  
						
						 
						
						
						
						
					 
					
						2018-01-04 15:14:03 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ron Arts 
							
						 
					 
					
						
						
							
						
						ef8a741527 
					 
					
						
						
							
							In public/private keys, force the header to be on its own line, allow missing \n after the footer  
						
						 
						
						
						
						
					 
					
						2018-01-04 12:17:31 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ron Arts 
							
						 
					 
					
						
						
							
						
						91d9c11fb4 
					 
					
						
						
							
							Fixed tests, allow whitespace at the end of a key  
						
						 
						
						
						
						
					 
					
						2018-01-03 10:18:32 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ron Arts 
							
						 
					 
					
						
						
							
						
						2ec8d148b0 
					 
					
						
						
							
							fix .gitattributes  
						
						 
						
						
						
						
					 
					
						2018-01-03 09:41:39 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Erick Torres 
							
						 
					 
					
						
						
							
						
						01d21b2533 
					 
					
						
						
							
							Update statement to generate codeChallenge in AuthCodeGrantTest  
						
						 
						
						
						
						
					 
					
						2017-12-29 12:32:12 -05:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						ff29721ca9 
					 
					
						
						
							
							Removing call to setEncryptionKey as no such function on the authorization server  
						
						 
						
						
						
						
					 
					
						2017-12-29 12:29:47 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						5b79b40df9 
					 
					
						
						
							
							Fixed count placement to make code more efficient as per scrutinizer feedback  
						
						 
						
						
						
						
					 
					
						2017-12-29 12:25:39 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						b6d9835281 
					 
					
						
						
							
							Merge branch 'master' into fix-pkce-implementation  
						
						 
						
						
						
						
					 
					
						2017-12-28 16:37:37 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						57ca83a8ba 
					 
					
						
						
							
							Removing missing scope tests as temporarily reverted this functionality  
						
						 
						
						
						
						
					 
					
						2017-12-24 00:18:20 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						41bba7f58c 
					 
					
						
						
							
							Removing missing scope test  
						
						 
						
						... 
						
						
						
						Temporarily removing missing scope test as have reverted this functionality for version 6.1.1 
						
						
					 
					
						2017-12-24 00:07:22 +00:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andrew Millington 
							
						 
					 
					
						
						
							
						
						dcae4af6ce 
					 
					
						
						
							
							Remove missing scope test  
						
						 
						
						... 
						
						
						
						Temporarily removing missing scope test for the AuthGrant 
						
						
					 
					
						2017-12-24 00:06:18 +00:00