ciaranj
301ebab90c
Added an extra test, and checked realHeaders to catch any dodgy custom ones
2013-03-05 18:07:40 +00:00
ciaranj
8be23c309c
Merge remote-tracking branch 'jfromaniello/bug129'
2013-03-05 17:43:51 +00:00
ciaranj
03d713be9a
Fixes Issue #129
...
Not ideal, but effectively reverts the default behaviour of the library to how 0.9.8 worked,
that is it passes the access_token as a query parameter to the server.
To allow the utility 'get' method to use an Authorization header *instead* then you need to
explicitly enable this behaviour by using the method :
var oa= new Oauth(...);
oa.useAuthorizationHeaderforGET(true)
Note this can/should be used in conjunction with the other utility method:
oa.setAuthMethod(...)
The default value for the Authorization header is 'Bearer'
If you're building your own requests using oa._request then there is a new exported
method:
oa.buildAuthHeader(token)
2013-03-05 17:34:20 +00:00
ciaranj
ba81ad43bd
Fixes Issue #125 - Abusing externally passed in data structure
...
Also had to re-jig the test, as it turns out the contributor-supplied test
for this work didn't *actually* test anything :(
2013-03-05 17:00:35 +00:00
Jose F. Romaniello
798157c185
fix #129 Setting token in query params and Authorization header violates spec
2013-03-05 04:04:00 -03:00
Brian Park
efbce5bd68
Add in Authorization Header and support extra headers by default.
2012-11-21 10:29:30 -05:00
ciaranj
64b2487199
Merge remote-tracking branch 'lukebaker/patch-1' into add_support_for_oauth2_token_refresh
2012-04-24 21:19:02 +01:00
ciaranj
ef51782104
Fix global scope leak, and amend decision on when to use https or http libraries
2012-04-24 21:11:20 +01:00
ciaranj
1970e0045e
Merge remote-tracking branch 'dmathieu/fix_http' into not_require_http
...
Conflicts:
lib/oauth2.js
2012-04-24 20:54:49 +01:00
ciaranj
e4cc471160
Merge commit '2e1f9f9' into oauth2_results_callback
2012-04-24 20:37:38 +01:00
Luke Baker
e1a8422e7c
Add support for refreshing an access token
2012-03-13 23:17:15 -03:00
Patrick Negri
6404f6e023
[ #Issue 75 ] Fixing Live Protocol 302 Resources
2011-10-26 14:05:03 -02:00
Fabian Jakobs
9b4703aaca
request variable leaked into the global scope
2011-10-20 16:39:13 +03:00
Damien Mathieu
32620902a5
don't send the request using https if the uri is http
2011-09-24 14:10:46 +02:00
Tang Bo Hao
2e1f9f9db6
callback results when getAccessToken
2011-09-21 01:26:33 +08:00
ciaranj
a2ac03bc37
uggh committed a console.log
2011-08-15 23:43:29 +01:00
ciaranj
707b8f77b2
OAuth2 getOAuthAccessToken now POSTs rather than GET as per the spec (v20)
2011-08-15 23:30:47 +01:00
ciaranj
0643395b2e
Supports OAuth Providers that don't end connections neatly (Google!)
2011-08-15 23:27:06 +01:00
ciaranj
5707c480df
Adding a configuration mechanism (that may not stay) to allow overriding of the name of the access token used when requesting resources
2011-06-30 00:03:22 +01:00
ciaranj
349d258b1f
Updated the Oauth2 code to work with the new https api
2011-02-06 19:52:44 +00:00
ciaranj
2c0b8c3b79
Fixes issue 17 - Handles rev07 and above of the OAuth spec
2010-12-12 22:38:56 +00:00
Mark Wubben
ea09e67244
Error object rather than string in OAuth2 as well.
2010-08-24 06:12:49 +08:00
ciaranj
ca370f3f5a
Added new get method to OAuth2. Deprecated older getProtectedResource method
2010-08-05 22:49:55 +01:00
ciaranj
09d613cd46
Bumping to 0.7.3 oauth 2 now sending a Content-Length header of 0 to
...
play well with github/nginx.
2010-06-01 21:03:23 +01:00
ciaranj
6b7b8f3198
Added in some basic (but working) OAuth2 support
...
no specs :( .. I suck.
2010-05-02 15:43:10 +01:00
