log mod_http_oauth2/mod_http_oauth2.lua @ 5216:1d9dbe84b6e8

age author description
Mon, 06 Mar 2023 16:53:27 +0100 Kim Alvefur mod_http_oauth2: Remove authorization codes after use
Mon, 06 Mar 2023 16:49:43 +0100 Kim Alvefur mod_http_oauth2: Fix authorization code logic
Mon, 06 Mar 2023 10:37:43 +0000 Matthew Wild mod_http_oauth2: Switch to '303 See Other' redirects
Mon, 06 Mar 2023 10:29:14 +0000 Matthew Wild mod_http_oauth2: Allow non-HTTPS on localhost URLs
Mon, 06 Mar 2023 09:46:58 +0000 Matthew Wild mod_http_oauth2: Add authentication, consent and error pages
Mon, 06 Mar 2023 09:40:17 +0000 Matthew Wild mod_http_oauth: Factor out issuer URL calculation to a helper function
Sun, 05 Mar 2023 12:38:20 +0100 Kim Alvefur mod_http_oauth2: Clarify comment referencing mod_http_errors (thanks MattJ)
Sat, 04 Mar 2023 23:36:13 +0100 Kim Alvefur mod_http_oauth2: Specify host for which to retrieve list of roles
Sat, 04 Mar 2023 21:36:00 +0100 Kim Alvefur mod_http_oauth2: Return list of active roles in discovery
Sat, 04 Mar 2023 21:24:35 +0100 Kim Alvefur mod_http_oauth2: Return actually enabled response types in discovery
Sat, 04 Mar 2023 17:06:47 +0100 Kim Alvefur mod_http_oauth2: Calculate client secret expiry in registration response
Sat, 04 Mar 2023 13:23:26 +0000 Matthew Wild mod_http_oauth2: Strip trailing '/' from issuer URL
Fri, 03 Mar 2023 22:54:46 +0100 Kim Alvefur mod_http_oauth2: Advertise endpoints that are enabled
Fri, 03 Mar 2023 22:48:59 +0100 Kim Alvefur mod_http_oauth2: Separate client_secret verification key from JWT key
Fri, 03 Mar 2023 22:48:38 +0100 Kim Alvefur mod_http_oauth2: Fix response type config
Fri, 03 Mar 2023 22:03:50 +0100 Kim Alvefur mod_http_oauth2: Remove error message
Fri, 03 Mar 2023 21:45:24 +0100 Kim Alvefur mod_http_oauth2: Mention name of client when giving out OOB authorization code
Fri, 03 Mar 2023 21:45:05 +0100 Kim Alvefur mod_http_oauth2: Comment on mutation by other module
Fri, 03 Mar 2023 21:14:19 +0100 Kim Alvefur mod_http_oauth2: Implement stateless dynamic client registration
Fri, 03 Mar 2023 19:21:38 +0000 Matthew Wild mod_http_oauth2: Add support for 'iss' authz response parameter (RFC 9207)
Fri, 03 Mar 2023 18:00:28 +0100 Kim Alvefur mod_http_oauth2: Derive scope from correct user details
Fri, 03 Mar 2023 14:22:05 +0100 Kim Alvefur mod_http_oauth2: Fix to actually return OOB response
Fri, 03 Mar 2023 11:24:05 +0000 Matthew Wild mod_http_oauth2: Add OIDC discovery endpoint (thanks Zash)
Thu, 02 Mar 2023 23:59:09 +0100 Kim Alvefur mod_http_oauth2: Implement OOB special redirect URI in code flow
Thu, 02 Mar 2023 23:57:29 +0100 Kim Alvefur mod_http_oauth2: Add settings for allowed grant and response types
Thu, 02 Mar 2023 22:06:50 +0100 Kim Alvefur mod_http_oauth2: Implement the Implicit flow
Thu, 02 Mar 2023 22:00:42 +0100 Kim Alvefur mod_http_oauth2: Fix treatment of 'redirect_uri' parameter in code flow
Wed, 01 Mar 2023 21:55:34 +0100 Kim Alvefur mod_http_oauth2: Issue tokens for the purpose of 'oauth2'
Wed, 01 Mar 2023 21:11:48 +0100 Kim Alvefur mod_http_oauth2: Fix removal of consumed authorization codes
Thu, 18 Aug 2022 10:36:58 +0100 Matthew Wild mod_http_oauth2: Update for new new role API
Wed, 13 Jul 2022 11:20:09 +0100 Matthew Wild mod_http_oauth2: Updates for Prosody's new role API (backwards-compatible)
Thu, 02 Sep 2021 23:06:58 +0200 Kim Alvefur mod_http_oauth2: Gracefully handle cache write failure
Thu, 02 Sep 2021 23:03:41 +0200 Kim Alvefur mod_http_oauth2: Optimize cleanup timer
Thu, 21 Jan 2021 18:06:12 +0000 Matthew Wild mod_http_oauth2: Add endpoint to revoke a key (RFC 7009 kinda)
Sat, 16 Jan 2021 19:47:22 +0000 Matthew Wild mod_http_oauth2: Rudimentary support for scopes (but not really)
Sat, 28 Nov 2020 21:22:16 +0100 Kim Alvefur mod_http_oauth2: Fix passing OAuth-specific error details
Sun, 22 Nov 2020 19:11:42 +0100 Kim Alvefur mod_http_oauth2: Periodically trim unused authorization codes
Sun, 22 Nov 2020 18:49:31 +0100 Kim Alvefur mod_http_oauth2: Keep authorization codes in memory instead of storage
Sun, 22 Nov 2020 18:46:25 +0100 Kim Alvefur mod_http_oauth2: Reduce authorization code validity time to 2 minutes
Sun, 22 Nov 2020 18:39:55 +0100 Kim Alvefur mod_http_oauth2: Factor out authorization code validity decision
Sun, 22 Nov 2020 01:55:42 +0100 Kim Alvefur mod_http_oauth2: Add TODO
Sun, 22 Nov 2020 01:32:09 +0100 Kim Alvefur mod_http_oauth2: Improve storage of client secret
Sat, 21 Nov 2020 23:55:10 +0100 Kim Alvefur mod_http_oauth2: Rescope oauth client config into users' storage
Sat, 21 Nov 2020 23:03:47 +0100 Kim Alvefur mod_http_oauth2: Remove unnecessary redirect uri check
Sat, 21 Nov 2020 16:36:44 +0100 Kim Alvefur mod_http_oauth2: Unpack event object to improve readability
Sat, 21 Nov 2020 16:05:55 +0100 Kim Alvefur mod_http_oauth2: Fix incomplete function arity change in dea6bea2ddd3
Sat, 21 Nov 2020 01:08:30 +0100 Kim Alvefur mod_http_oauth2: Authorization code flow
Mon, 09 Nov 2020 12:49:31 +0100 Kim Alvefur mod_http_oauth2: Fix typo not caught by luacheck
Fri, 23 Oct 2020 22:23:20 +0200 Kim Alvefur mod_http_oauth2: Accept empty scope
Sun, 08 Mar 2020 13:42:55 +0100 Kim Alvefur mod_http_oauth2: Set content type on successful repsponses (fixes #1501)
Thu, 27 Feb 2020 23:17:31 +0100 Kim Alvefur mod_http_oauth2: Use component_secret setting as password on Components
Thu, 27 Feb 2020 23:14:24 +0100 Kim Alvefur mod_http_oauth2: Allow creation of full JID tokens
Thu, 27 Feb 2020 22:58:56 +0100 Kim Alvefur mod_http_oauth2: Refactor re-joining of JID out of token constructor
Wed, 26 Feb 2020 22:48:10 +0000 Matthew Wild mod_rest, mod_http_oauth2: Switch from mod_authtokens to mod_tokenauth per Prosody bf81523e2ff4
Wed, 26 Feb 2020 17:57:53 +0000 Matthew Wild mod_http_oauth2: Implement real tokens using mod_authtokens
Sun, 23 Feb 2020 21:36:53 +0000 Matthew Wild mod_http_oauth2: OAuth2 API (work in progress for developers only)