Commit Graph

38 Commits

Author SHA1 Message Date
db8088793f fix: prevent double callback in _executeRequest 2021-11-16 11:05:40 +01:00
6baf574f87 Adding ability to specify an agent for OAuth2 requests 2017-01-04 10:25:52 +00:00
eefd821ea9 Bumping to 0.9.14 (Treat 20x OAuth2 responses as successes) 2015-09-22 17:15:04 +01:00
763d5ec3cc remove dead code (bogus call to createCredentials) 2015-02-04 10:36:03 -07:00
a4b96af335 Repair missing commit(s) 2014-12-18 20:12:24 +00:00
9419b00441 Fix headers variable in wrong scope in get() 2014-10-08 18:35:52 +00:00
47e50fe3ce Fix #196 #207
tests/oauth2.js
  [remove] https never used
  [add] https url testing
lib/oauth2.js
  [remove] creds never used
2014-08-08 21:24:51 +08:00
00ae962b32 Merge branch 'broox-oauth2_put'
Conflicts:
	tests/oauth2.js
2014-05-21 20:23:47 +01:00
1eda281512 Provides a test-case for #160 2014-05-21 20:22:00 +01:00
4d8bf8ba5f Merge pull request #140 from AndrewMartens/master
Set default User-Agent if not otherwise specified in customHeaders
2014-01-04 06:17:49 -08:00
e599d29787 Write the post_body to OAuth2 PUT requests 2013-10-15 00:53:34 +00:00
8658d7d55b Remove type query parameter from OAuth2 requests.
While the type parameter was required in older versions of the OAuth2
specification, it was removed in version 8. Currently, this breaks OAuth2
against the Dropbox API. Closes #127.

http://tools.ietf.org/html/draft-ietf-oauth-v2-08#section-4.1.1
2013-07-27 18:42:14 -04:00
a742d838f5 Set default User-Agent if not otherwise specified in customHeaders 2013-05-07 14:38:04 -07:00
301ebab90c Added an extra test, and checked realHeaders to catch any dodgy custom ones 2013-03-05 18:07:40 +00:00
8be23c309c Merge remote-tracking branch 'jfromaniello/bug129' 2013-03-05 17:43:51 +00:00
03d713be9a Fixes Issue #129
Not ideal, but effectively reverts the default behaviour of the library to how 0.9.8 worked,
that is it passes the access_token as a query parameter to the server.

To allow the utility 'get' method to use an Authorization header *instead* then you need to
explicitly enable this behaviour by using the method :

  var oa= new Oauth(...);
  oa.useAuthorizationHeaderforGET(true)

Note this can/should be used in conjunction with the other utility method:

  oa.setAuthMethod(...)

The default value for the Authorization header is 'Bearer'

If you're building your own requests using oa._request then there is a new exported
method:

  oa.buildAuthHeader(token)
2013-03-05 17:34:20 +00:00
ba81ad43bd Fixes Issue #125 - Abusing externally passed in data structure
Also had to re-jig the test, as it turns out the contributor-supplied test
for this work didn't *actually* test anything :(
2013-03-05 17:00:35 +00:00
798157c185 fix #129 Setting token in query params and Authorization header violates spec 2013-03-05 04:04:00 -03:00
efbce5bd68 Add in Authorization Header and support extra headers by default. 2012-11-21 10:29:30 -05:00
64b2487199 Merge remote-tracking branch 'lukebaker/patch-1' into add_support_for_oauth2_token_refresh 2012-04-24 21:19:02 +01:00
ef51782104 Fix global scope leak, and amend decision on when to use https or http libraries 2012-04-24 21:11:20 +01:00
1970e0045e Merge remote-tracking branch 'dmathieu/fix_http' into not_require_http
Conflicts:
	lib/oauth2.js
2012-04-24 20:54:49 +01:00
e4cc471160 Merge commit '2e1f9f9' into oauth2_results_callback 2012-04-24 20:37:38 +01:00
e1a8422e7c Add support for refreshing an access token 2012-03-13 23:17:15 -03:00
6404f6e023 [ #Issue 75 ] Fixing Live Protocol 302 Resources 2011-10-26 14:05:03 -02:00
9b4703aaca request variable leaked into the global scope 2011-10-20 16:39:13 +03:00
32620902a5 don't send the request using https if the uri is http 2011-09-24 14:10:46 +02:00
2e1f9f9db6 callback results when getAccessToken 2011-09-21 01:26:33 +08:00
a2ac03bc37 uggh committed a console.log 2011-08-15 23:43:29 +01:00
707b8f77b2 OAuth2 getOAuthAccessToken now POSTs rather than GET as per the spec (v20) 2011-08-15 23:30:47 +01:00
0643395b2e Supports OAuth Providers that don't end connections neatly (Google!) 2011-08-15 23:27:06 +01:00
5707c480df Adding a configuration mechanism (that may not stay) to allow overriding of the name of the access token used when requesting resources 2011-06-30 00:03:22 +01:00
349d258b1f Updated the Oauth2 code to work with the new https api 2011-02-06 19:52:44 +00:00
2c0b8c3b79 Fixes issue 17 - Handles rev07 and above of the OAuth spec 2010-12-12 22:38:56 +00:00
ea09e67244 Error object rather than string in OAuth2 as well. 2010-08-24 06:12:49 +08:00
ca370f3f5a Added new get method to OAuth2. Deprecated older getProtectedResource method 2010-08-05 22:49:55 +01:00
09d613cd46 Bumping to 0.7.3 oauth 2 now sending a Content-Length header of 0 to
play well with github/nginx.
2010-06-01 21:03:23 +01:00
6b7b8f3198 Added in some basic (but working) OAuth2 support
no specs :( .. I suck.
2010-05-02 15:43:10 +01:00