38 Commits

Author SHA1 Message Date
Tomasz Ciborski
db8088793f
fix: prevent double callback in _executeRequest 2021-11-16 11:05:40 +01:00
Philip Skinner
6baf574f87 Adding ability to specify an agent for OAuth2 requests 2017-01-04 10:25:52 +00:00
ciaranj
eefd821ea9 Bumping to 0.9.14 (Treat 20x OAuth2 responses as successes) 2015-09-22 17:15:04 +01:00
AJ ONeal
763d5ec3cc remove dead code (bogus call to createCredentials) 2015-02-04 10:36:03 -07:00
ciaranj
a4b96af335 Repair missing commit(s) 2014-12-18 20:12:24 +00:00
John Baumbach
9419b00441 Fix headers variable in wrong scope in get() 2014-10-08 18:35:52 +00:00
zedgu
47e50fe3ce Fix #196 #207
tests/oauth2.js
  [remove] https never used
  [add] https url testing
lib/oauth2.js
  [remove] creds never used
2014-08-08 21:24:51 +08:00
ciaranj
00ae962b32 Merge branch 'broox-oauth2_put'
Conflicts:
	tests/oauth2.js
2014-05-21 20:23:47 +01:00
ciaranj
1eda281512 Provides a test-case for #160 2014-05-21 20:22:00 +01:00
Ciaran Jessup
4d8bf8ba5f Merge pull request #140 from AndrewMartens/master
Set default User-Agent if not otherwise specified in customHeaders
2014-01-04 06:17:49 -08:00
Derek Brooks
e599d29787 Write the post_body to OAuth2 PUT requests 2013-10-15 00:53:34 +00:00
Brad Gignac
8658d7d55b Remove type query parameter from OAuth2 requests.
While the type parameter was required in older versions of the OAuth2
specification, it was removed in version 8. Currently, this breaks OAuth2
against the Dropbox API. Closes #127.

http://tools.ietf.org/html/draft-ietf-oauth-v2-08#section-4.1.1
2013-07-27 18:42:14 -04:00
Andrew Martens
a742d838f5 Set default User-Agent if not otherwise specified in customHeaders 2013-05-07 14:38:04 -07:00
ciaranj
301ebab90c Added an extra test, and checked realHeaders to catch any dodgy custom ones 2013-03-05 18:07:40 +00:00
ciaranj
8be23c309c Merge remote-tracking branch 'jfromaniello/bug129' 2013-03-05 17:43:51 +00:00
ciaranj
03d713be9a Fixes Issue #129
Not ideal, but effectively reverts the default behaviour of the library to how 0.9.8 worked,
that is it passes the access_token as a query parameter to the server.

To allow the utility 'get' method to use an Authorization header *instead* then you need to
explicitly enable this behaviour by using the method :

  var oa= new Oauth(...);
  oa.useAuthorizationHeaderforGET(true)

Note this can/should be used in conjunction with the other utility method:

  oa.setAuthMethod(...)

The default value for the Authorization header is 'Bearer'

If you're building your own requests using oa._request then there is a new exported
method:

  oa.buildAuthHeader(token)
2013-03-05 17:34:20 +00:00
ciaranj
ba81ad43bd Fixes Issue #125 - Abusing externally passed in data structure
Also had to re-jig the test, as it turns out the contributor-supplied test
for this work didn't *actually* test anything :(
2013-03-05 17:00:35 +00:00
Jose F. Romaniello
798157c185 fix #129 Setting token in query params and Authorization header violates spec 2013-03-05 04:04:00 -03:00
Brian Park
efbce5bd68 Add in Authorization Header and support extra headers by default. 2012-11-21 10:29:30 -05:00
ciaranj
64b2487199 Merge remote-tracking branch 'lukebaker/patch-1' into add_support_for_oauth2_token_refresh 2012-04-24 21:19:02 +01:00
ciaranj
ef51782104 Fix global scope leak, and amend decision on when to use https or http libraries 2012-04-24 21:11:20 +01:00
ciaranj
1970e0045e Merge remote-tracking branch 'dmathieu/fix_http' into not_require_http
Conflicts:
	lib/oauth2.js
2012-04-24 20:54:49 +01:00
ciaranj
e4cc471160 Merge commit '2e1f9f9' into oauth2_results_callback 2012-04-24 20:37:38 +01:00
Luke Baker
e1a8422e7c Add support for refreshing an access token 2012-03-13 23:17:15 -03:00
Patrick Negri
6404f6e023 [ #Issue 75 ] Fixing Live Protocol 302 Resources 2011-10-26 14:05:03 -02:00
Fabian Jakobs
9b4703aaca request variable leaked into the global scope 2011-10-20 16:39:13 +03:00
Damien Mathieu
32620902a5 don't send the request using https if the uri is http 2011-09-24 14:10:46 +02:00
Tang Bo Hao
2e1f9f9db6 callback results when getAccessToken 2011-09-21 01:26:33 +08:00
ciaranj
a2ac03bc37 uggh committed a console.log 2011-08-15 23:43:29 +01:00
ciaranj
707b8f77b2 OAuth2 getOAuthAccessToken now POSTs rather than GET as per the spec (v20) 2011-08-15 23:30:47 +01:00
ciaranj
0643395b2e Supports OAuth Providers that don't end connections neatly (Google!) 2011-08-15 23:27:06 +01:00
ciaranj
5707c480df Adding a configuration mechanism (that may not stay) to allow overriding of the name of the access token used when requesting resources 2011-06-30 00:03:22 +01:00
ciaranj
349d258b1f Updated the Oauth2 code to work with the new https api 2011-02-06 19:52:44 +00:00
ciaranj
2c0b8c3b79 Fixes issue 17 - Handles rev07 and above of the OAuth spec 2010-12-12 22:38:56 +00:00
Mark Wubben
ea09e67244 Error object rather than string in OAuth2 as well. 2010-08-24 06:12:49 +08:00
ciaranj
ca370f3f5a Added new get method to OAuth2. Deprecated older getProtectedResource method 2010-08-05 22:49:55 +01:00
ciaranj
09d613cd46 Bumping to 0.7.3 oauth 2 now sending a Content-Length header of 0 to
play well with github/nginx.
2010-06-01 21:03:23 +01:00
ciaranj
6b7b8f3198 Added in some basic (but working) OAuth2 support
no specs :( .. I suck.
2010-05-02 15:43:10 +01:00