Thu, 16 Mar 2023 17:03:48 +0100 |
Kim Alvefur |
mod_http_oauth2: Prepare to handle multiple e.g. non-role scopes
|
Thu, 16 Mar 2023 00:06:43 +0100 |
Kim Alvefur |
mod_http_oauth2: Fix attempt to index a boolean value
|
Tue, 14 Mar 2023 18:08:25 +0100 |
Kim Alvefur |
mod_http_oauth2: Record details of OAuth client a token is issued to
|
Sun, 12 Mar 2023 17:56:23 +0100 |
Kim Alvefur |
mod_http_oauth2: Invoke mod_http_errors to render error on invalid redirect
|
Sun, 12 Mar 2023 12:06:44 +0100 |
Kim Alvefur |
mod_http_oauth2: Validate all URIs against client_uri in client registration
|
Sun, 12 Mar 2023 11:27:29 +0100 |
Kim Alvefur |
mod_http_oauth2: Organize HTTP routes with comments
|
Sat, 11 Mar 2023 22:58:47 +0100 |
Kim Alvefur |
mod_http_oauth2: Fix validation of informative URIs
|
Sat, 11 Mar 2023 22:46:27 +0100 |
Kim Alvefur |
mod_http_oauth2: Use more compact IDs
|
Sat, 11 Mar 2023 22:31:02 +0100 |
Kim Alvefur |
mod_http_oauth2: Validate that informative URLs match the redirect URIs
|
Sat, 11 Mar 2023 22:25:50 +0100 |
Kim Alvefur |
mod_http_oauth2: Reject insecure redirect URIs
|
Sat, 11 Mar 2023 22:25:22 +0100 |
Kim Alvefur |
mod_http_oauth2: Validate that redirect URIs are absolute
|
Sat, 11 Mar 2023 22:30:58 +0100 |
Kim Alvefur |
mod_http_oauth2: Validate basic URI syntax of redirect URIs
|
Sat, 11 Mar 2023 21:13:00 +0100 |
Kim Alvefur |
mod_http_oauth2: Require URL to client informational page in registration
|
Sat, 11 Mar 2023 21:11:50 +0100 |
Kim Alvefur |
mod_http_oauth2: Reorder client metadata validation schema
|
Fri, 10 Mar 2023 12:03:23 +0100 |
Kim Alvefur |
mod_http_oauth2: Fix to disable disabled response handlers correctly
|
Fri, 10 Mar 2023 12:01:52 +0100 |
Kim Alvefur |
mod_http_oauth2: Log flows enabled and disabled
|
Fri, 10 Mar 2023 11:54:30 +0100 |
Kim Alvefur |
mod_http_oauth2: Fix appending of query parts in error redirects
|
Thu, 09 Mar 2023 14:46:06 +0100 |
Kim Alvefur |
mod_http_oauth2: Implement the OpenID userinfo endpoint
|
Tue, 07 Mar 2023 15:33:07 +0000 |
Matthew Wild |
mod_http_oauth2: token endpoint: handle missing credentials
|
Tue, 07 Mar 2023 15:31:19 +0000 |
Matthew Wild |
mod_http_oauth2: Fail early when no authorization header present
|
Tue, 07 Mar 2023 15:27:50 +0000 |
Matthew Wild |
mod_http_oauth2: Support HTTP Basic auth on token endpoint
|
Tue, 07 Mar 2023 15:18:41 +0000 |
Matthew Wild |
mod_http_oauth2: Separate extracting credentials from requests and verifying
|
Tue, 07 Mar 2023 14:52:43 +0000 |
Matthew Wild |
mod_http_oauth2: Reflect ALL attributes of the client registration
|
Tue, 07 Mar 2023 13:19:19 +0000 |
Matthew Wild |
mod_http_oauth2: Improve handling of redirect_uri matching and fallback
|
Tue, 07 Mar 2023 13:14:25 +0100 |
Kim Alvefur |
mod_http_oauth2: Correct field name for HTTP response status code
|
Tue, 07 Mar 2023 10:27:40 +0000 |
Matthew Wild |
mod_http_oauth2: Fix incorrect function name (thanks Zash/luacheck)
|
Mon, 06 Mar 2023 16:53:27 +0100 |
Kim Alvefur |
mod_http_oauth2: Remove authorization codes after use
|
Mon, 06 Mar 2023 16:49:43 +0100 |
Kim Alvefur |
mod_http_oauth2: Fix authorization code logic
|
Mon, 06 Mar 2023 10:37:43 +0000 |
Matthew Wild |
mod_http_oauth2: Switch to '303 See Other' redirects
|
Mon, 06 Mar 2023 10:29:14 +0000 |
Matthew Wild |
mod_http_oauth2: Allow non-HTTPS on localhost URLs
|