Ciaran Jessup
4d8bf8ba5f
Merge pull request #140 from AndrewMartens/master
...
Set default User-Agent if not otherwise specified in customHeaders
2014-01-04 06:17:49 -08:00
Brad Gignac
8658d7d55b
Remove type query parameter from OAuth2 requests.
...
While the type parameter was required in older versions of the OAuth2
specification, it was removed in version 8. Currently, this breaks OAuth2
against the Dropbox API. Closes #127 .
http://tools.ietf.org/html/draft-ietf-oauth-v2-08#section-4.1.1
2013-07-27 18:42:14 -04:00
Andrew Martens
a742d838f5
Set default User-Agent if not otherwise specified in customHeaders
2013-05-07 14:38:04 -07:00
ciaranj
301ebab90c
Added an extra test, and checked realHeaders to catch any dodgy custom ones
2013-03-05 18:07:40 +00:00
ciaranj
8be23c309c
Merge remote-tracking branch 'jfromaniello/bug129'
2013-03-05 17:43:51 +00:00
ciaranj
03d713be9a
Fixes Issue #129
...
Not ideal, but effectively reverts the default behaviour of the library to how 0.9.8 worked,
that is it passes the access_token as a query parameter to the server.
To allow the utility 'get' method to use an Authorization header *instead* then you need to
explicitly enable this behaviour by using the method :
var oa= new Oauth(...);
oa.useAuthorizationHeaderforGET(true)
Note this can/should be used in conjunction with the other utility method:
oa.setAuthMethod(...)
The default value for the Authorization header is 'Bearer'
If you're building your own requests using oa._request then there is a new exported
method:
oa.buildAuthHeader(token)
2013-03-05 17:34:20 +00:00
ciaranj
ba81ad43bd
Fixes Issue #125 - Abusing externally passed in data structure
...
Also had to re-jig the test, as it turns out the contributor-supplied test
for this work didn't *actually* test anything :(
2013-03-05 17:00:35 +00:00
Jose F. Romaniello
798157c185
fix #129 Setting token in query params and Authorization header violates spec
2013-03-05 04:04:00 -03:00
Brian Park
efbce5bd68
Add in Authorization Header and support extra headers by default.
2012-11-21 10:29:30 -05:00
ciaranj
64b2487199
Merge remote-tracking branch 'lukebaker/patch-1' into add_support_for_oauth2_token_refresh
2012-04-24 21:19:02 +01:00
ciaranj
ef51782104
Fix global scope leak, and amend decision on when to use https or http libraries
2012-04-24 21:11:20 +01:00
ciaranj
1970e0045e
Merge remote-tracking branch 'dmathieu/fix_http' into not_require_http
...
Conflicts:
lib/oauth2.js
2012-04-24 20:54:49 +01:00
ciaranj
e4cc471160
Merge commit '2e1f9f9' into oauth2_results_callback
2012-04-24 20:37:38 +01:00
Luke Baker
e1a8422e7c
Add support for refreshing an access token
2012-03-13 23:17:15 -03:00
Patrick Negri
6404f6e023
[ #Issue 75 ] Fixing Live Protocol 302 Resources
2011-10-26 14:05:03 -02:00
Fabian Jakobs
9b4703aaca
request variable leaked into the global scope
2011-10-20 16:39:13 +03:00
Damien Mathieu
32620902a5
don't send the request using https if the uri is http
2011-09-24 14:10:46 +02:00
Tang Bo Hao
2e1f9f9db6
callback results when getAccessToken
2011-09-21 01:26:33 +08:00
ciaranj
a2ac03bc37
uggh committed a console.log
2011-08-15 23:43:29 +01:00
ciaranj
707b8f77b2
OAuth2 getOAuthAccessToken now POSTs rather than GET as per the spec (v20)
2011-08-15 23:30:47 +01:00
ciaranj
0643395b2e
Supports OAuth Providers that don't end connections neatly (Google!)
2011-08-15 23:27:06 +01:00
ciaranj
5707c480df
Adding a configuration mechanism (that may not stay) to allow overriding of the name of the access token used when requesting resources
2011-06-30 00:03:22 +01:00
ciaranj
349d258b1f
Updated the Oauth2 code to work with the new https api
2011-02-06 19:52:44 +00:00
ciaranj
2c0b8c3b79
Fixes issue 17 - Handles rev07 and above of the OAuth spec
2010-12-12 22:38:56 +00:00
Mark Wubben
ea09e67244
Error object rather than string in OAuth2 as well.
2010-08-24 06:12:49 +08:00
ciaranj
ca370f3f5a
Added new get method to OAuth2. Deprecated older getProtectedResource method
2010-08-05 22:49:55 +01:00
ciaranj
09d613cd46
Bumping to 0.7.3 oauth 2 now sending a Content-Length header of 0 to
...
play well with github/nginx.
2010-06-01 21:03:23 +01:00
ciaranj
6b7b8f3198
Added in some basic (but working) OAuth2 support
...
no specs :( .. I suck.
2010-05-02 15:43:10 +01:00
