Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Special handling for client credential grant type | Andrew Arnott | 2012-05-29 | 1 | -0/+13 |
| | | | | | | | | Access token requests that carry client credential grants are now specially handled and signal to the authorization server that an authorization record should be created. More work toward #138 | ||||
* | Resource owner password grant method rename | Andrew Arnott | 2012-05-29 | 1 | -36/+38 |
| | | | | | | | | | | | | Renamed IAuthorizationServerHost.IsResourceOwnerCredentialValid to TryAuthorizeResourceOwnerCredentialGrant so that authorization servers are prepared to approve refresh tokens that may be issued as a result of a resource owner password grant. This also removes some of the "validation" that wasn't really doing anything useful for resource owner password grant types. Toward an eventual fix for #138 | ||||
* | Anonymous clients can now exchange resource owner credentials for refresh ↵ | Andrew Arnott | 2012-04-22 | 1 | -7/+15 |
| | | | | | | | | and access tokens. (authenticated clients already could). Fixes #100 | ||||
* | Fixes access denial errors from OAuth 2 resource servers so they include the ↵ | Andrew Arnott | 2012-04-22 | 1 | -12/+3 |
| | | | | | | required parameters in their WWW-Authenticate headers. Fixes #124 | ||||
* | Fixed HTTP Basic authentication for OAuth 2 clients so that it actually ↵ | Andrew Arnott | 2012-04-19 | 1 | -8/+10 |
| | | | | works in the sample. | ||||
* | Fixed up the configuration story for OAuth 2. | Andrew Arnott | 2012-04-18 | 1 | -3/+11 |
| | |||||
* | StyleCop cleanup, and reversal of some code changes that were no longer ↵ | Andrew Arnott | 2012-04-18 | 1 | -0/+7 |
| | | | | necessary. | ||||
* | We have HTTP Basic client authentication working now in OAuth 2. | Andrew Arnott | 2012-04-18 | 1 | -3/+12 |
| | |||||
* | Authorization server hosts may now provide canonical usernames for the ↵ | Andrew Arnott | 2012-04-16 | 1 | -1/+4 |
| | | | | | | resource owner given correct resource owner credentials. Fixes #103 | ||||
* | Authorization servers now gain insight into the calling client when ↵ | Andrew Arnott | 2012-04-15 | 1 | -1/+1 |
| | | | | | | validating resource owner credential grant type requests. Fixes #101 | ||||
* | Renamed IAuthorizationServer to IAuthorizationServerHost. | Andrew Arnott | 2012-04-08 | 1 | -1/+1 |
| | | | | To avoid confusion with the concrete class AuthorizationServer. | ||||
* | Allows the authorization server to store merely the hashes of client secrets. | Andrew Arnott | 2012-04-01 | 1 | -3/+2 |
| | | | | Fixes #92 | ||||
* | Moved localizable strings into specific OAuth 2 assemblies. | Andrew Arnott | 2012-03-31 | 1 | -2/+2 |
| | |||||
* | Consolidated all code and token serializations to one binding element. | Andrew Arnott | 2012-03-30 | 1 | -0/+56 |
| | |||||
* | Fixed up an authorization server's token endpoint to generate more accurate ↵ | Andrew Arnott | 2012-03-30 | 1 | -2/+2 |
| | | | | error messages. | ||||
* | Moved some message validation to another binding element. | Andrew Arnott | 2012-03-29 | 1 | -0/+104 |