| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
|
|
|
|
|
| |
This change adds the ability for authorization servers to override the granted scopes of client credential and resource owner password grant types.
Fixes #225
|
| |
|
|
|
|
|
|
|
|
| |
Access token requests that carry client credential grants are now
specially handled and signal to the authorization server that an
authorization record should be created.
More work toward #138
|
|
|
|
|
|
|
|
|
|
|
|
| |
Renamed IAuthorizationServerHost.IsResourceOwnerCredentialValid to
TryAuthorizeResourceOwnerCredentialGrant so that authorization servers
are prepared to approve refresh tokens that may be issued as a result of
a resource owner password grant.
This also removes some of the "validation" that wasn't really doing
anything useful for resource owner password grant types.
Toward an eventual fix for #138
|
|
|
|
|
|
|
| |
than just parameters.
AccessTokens are now serialized via a virtual method on that instance.
Fixes #38, I think.
|
|
|