takahe

Commit Graph

Author	SHA1	Message	Date
Andrew Godwin	1f3f28e8ff	Check scope on API endpoints	2023-02-19 11:37:02 -07:00
Cosmin Stejerean	efd5f481e9	OAuth2 Fixes (#338 ) This implements a few oauth2 fixes: - passes along the state object - enforces authorization code expiration (currently set to 1 minute, we could make this configurable) - enforces redirect_uri - properly checks for client_secret when granting a token - handles pulling client authentication for token grant from basic auth - implement token revocation	2023-01-01 11:46:55 -07:00
Andrew Godwin	1017c71ba1	Working start of an OAuth flow	2022-12-12 11:56:49 -07:00

Author

SHA1

Message

Date

Andrew Godwin

1f3f28e8ff

Check scope on API endpoints

2023-02-19 11:37:02 -07:00

Cosmin Stejerean

efd5f481e9

OAuth2 Fixes (#338 )

This implements a few oauth2 fixes:

- passes along the state object
- enforces authorization code expiration (currently set to 1 minute, we could make this configurable)
- enforces redirect_uri
- properly checks for client_secret when granting a token
- handles pulling client authentication for token grant from basic auth
- implement token revocation

2023-01-01 11:46:55 -07:00

Andrew Godwin

1017c71ba1

Working start of an OAuth flow

2022-12-12 11:56:49 -07:00

3 Commits