Tim Lai
0a807d6237
fix(auth): support for oauth2 relative url ( #6546 )
...
* Handle relative urls for oauth authorization
The full URL is computed based on the current selected server
if a relative URL is used as authorizationUrl
or tokenUrl
Co-authored-by: Eliot Berriot <contact@eliotberriot.com >
2020-10-21 15:46:31 -07:00
Andrew Korshunov
5a87c8a932
fix(auth): Allow PKCE for legacy AccessCode OAuth2 Grant Type ( #6011 )
...
fixes #6010
Co-authored-by: Andrew Korshunov <andrew.korshunov@vizsc.com >
2020-10-20 13:48:44 -07:00
dalbrx-forcam
95fd3e71ab
fix(auth): both array and Im.List scopes can be added to redirectURL ( #6416 )
2020-09-22 10:47:37 -07:00
poveilleux
139592e353
feat: add PKCE support for OAuth2 Authorization Code flows ( #5361 )
...
* Add PKCE support.
* Fix tests
* Update oauth2.md
* Rename usePkce
* Fix the BrokenComponent error
* Update oauth2.md
* Remove isCode variable. Remove uuid4 dependency.
* Remove utils functions
* Import crypto
* Fix tests
* Fix the tests
* Cleanup
* Fix code_challenge generation
* Move code challenge and verifier to utils for mocks. Update tests.
* Mock the PKCE methods in the utils file properly.
* Add missing expect
* use target-method spies
* Add comments to explain test values.
* Get rid of jsrsasign.
2019-10-07 17:24:43 -07:00
kyle
1e184e8e21
fix: sanitize URLs used for OAuth auth flow (via #5190 )
...
* fix: sanitize URLs used for OAuth auth flow
* embetter test case
* fix linter issue
2019-02-23 14:14:30 -08:00
Josh Ponelat
e8772fbe2a
fix typo in error message
2017-10-25 09:39:40 +02:00
Kyle Shockey
8b81bcac48
OAS3 Auth MVP
2017-10-11 16:58:24 -07:00
AlexVangelov
4172e33e04
satisfy project lint rules
2017-09-15 20:52:55 -04:00
AlexVangelov
9b1a6141df
OAuth2 authorizationUrl with extra query parameters (should include double '?')
2017-09-15 15:57:41 -04:00
Eric Turcotte
a09e0b8b4a
Removed semicolon
2017-07-13 11:16:47 -05:00
Eric Turcotte
badfea61c3
Renamed authorizeAccessCodeWithQueryParams->authorizeAccessCodeWithFormParams
...
since that is technically correct
2017-07-13 10:53:36 -05:00
Eric Turcotte
b06971bf81
If config useBasicAuthenticationWithAccessCodeGrant is truthy, send client id
...
and secret as HTTP basic auth during authorization_code grant
2017-07-12 23:35:34 -05:00
Furkan Ayhan
0c7119e855
Send redirect url when authenticating with oauth2-authorization_code
...
also fix indentations of files
2017-05-16 16:50:13 +03:00
김 재석
c81fdaec57
fix lint errors
2017-05-16 15:31:02 +09:00
김 재석
960a99a5ea
remove undefined parameters for OAuth2 authorize request
2017-05-16 15:20:58 +09:00
Anna Bodnia
8aebea34c4
add configuration of auth: scope separator, client id, client secret, app name, reaml, additionalQueryParams
2017-05-11 16:30:30 +03:00
Anna Bodnia
d013e7a05c
#2844 fix accessCode flow
2017-04-27 18:55:25 +03:00
Anna Bodnia
bb73dd49d8
fixes password, application oauth2 flows
2017-04-26 17:50:09 +03:00
Anna Bodnia
84b408849d
fixes #2929
2017-04-20 19:54:14 +03:00
Mészáros Mihály
4066d1920e
move out the code according @bodnia guide
2017-04-06 13:12:28 +02:00
Mészáros Mihály
a4500d1763
fix error handling
2017-04-06 08:03:36 +02:00
Mészáros Mihály
ec1ba7a124
fix most lint errors
2017-04-06 06:08:52 +02:00
Mészáros Mihály
ae33b7f46a
Implement application/client_credentials flow
2017-04-05 20:20:23 +02:00
Ron
f22a628934
in with the new
2017-03-17 21:17:53 -07:00