eefd821ea9
Bumping to 0.9.14 (Treat 20x OAuth2 responses as successes)
2015-09-22 17:15:04 +01:00
763d5ec3cc
remove dead code (bogus call to createCredentials)
2015-02-04 10:36:03 -07:00
a4b96af335
Repair missing commit(s)
2014-12-18 20:12:24 +00:00
9419b00441
Fix headers variable in wrong scope in get()
2014-10-08 18:35:52 +00:00
47e50fe3ce
Fix #196 #207
...
tests/oauth2.js
[remove] https never used
[add] https url testing
lib/oauth2.js
[remove] creds never used
2014-08-08 21:24:51 +08:00
00ae962b32
Merge branch 'broox-oauth2_put'
...
Conflicts:
tests/oauth2.js
2014-05-21 20:23:47 +01:00
1eda281512
Provides a test-case for #160
2014-05-21 20:22:00 +01:00
4d8bf8ba5f
Merge pull request #140 from AndrewMartens/master
...
Set default User-Agent if not otherwise specified in customHeaders
2014-01-04 06:17:49 -08:00
e599d29787
Write the post_body to OAuth2 PUT requests
2013-10-15 00:53:34 +00:00
8658d7d55b
Remove type query parameter from OAuth2 requests.
...
While the type parameter was required in older versions of the OAuth2
specification, it was removed in version 8. Currently, this breaks OAuth2
against the Dropbox API. Closes #127 .
http://tools.ietf.org/html/draft-ietf-oauth-v2-08#section-4.1.1
2013-07-27 18:42:14 -04:00
a742d838f5
Set default User-Agent if not otherwise specified in customHeaders
2013-05-07 14:38:04 -07:00
301ebab90c
Added an extra test, and checked realHeaders to catch any dodgy custom ones
2013-03-05 18:07:40 +00:00
8be23c309c
Merge remote-tracking branch 'jfromaniello/bug129'
2013-03-05 17:43:51 +00:00
03d713be9a
Fixes Issue #129
...
Not ideal, but effectively reverts the default behaviour of the library to how 0.9.8 worked,
that is it passes the access_token as a query parameter to the server.
To allow the utility 'get' method to use an Authorization header *instead* then you need to
explicitly enable this behaviour by using the method :
var oa= new Oauth(...);
oa.useAuthorizationHeaderforGET(true)
Note this can/should be used in conjunction with the other utility method:
oa.setAuthMethod(...)
The default value for the Authorization header is 'Bearer'
If you're building your own requests using oa._request then there is a new exported
method:
oa.buildAuthHeader(token)
2013-03-05 17:34:20 +00:00
ba81ad43bd
Fixes Issue #125 - Abusing externally passed in data structure
...
Also had to re-jig the test, as it turns out the contributor-supplied test
for this work didn't *actually* test anything :(
2013-03-05 17:00:35 +00:00
798157c185
fix #129 Setting token in query params and Authorization header violates spec
2013-03-05 04:04:00 -03:00
efbce5bd68
Add in Authorization Header and support extra headers by default.
2012-11-21 10:29:30 -05:00
64b2487199
Merge remote-tracking branch 'lukebaker/patch-1' into add_support_for_oauth2_token_refresh
2012-04-24 21:19:02 +01:00
ef51782104
Fix global scope leak, and amend decision on when to use https or http libraries
2012-04-24 21:11:20 +01:00
1970e0045e
Merge remote-tracking branch 'dmathieu/fix_http' into not_require_http
...
Conflicts:
lib/oauth2.js
2012-04-24 20:54:49 +01:00
e4cc471160
Merge commit '2e1f9f9' into oauth2_results_callback
2012-04-24 20:37:38 +01:00
e1a8422e7c
Add support for refreshing an access token
2012-03-13 23:17:15 -03:00
6404f6e023
[ #Issue 75 ] Fixing Live Protocol 302 Resources
2011-10-26 14:05:03 -02:00
9b4703aaca
request variable leaked into the global scope
2011-10-20 16:39:13 +03:00
32620902a5
don't send the request using https if the uri is http
2011-09-24 14:10:46 +02:00
2e1f9f9db6
callback results when getAccessToken
2011-09-21 01:26:33 +08:00
a2ac03bc37
uggh committed a console.log
2011-08-15 23:43:29 +01:00
707b8f77b2
OAuth2 getOAuthAccessToken now POSTs rather than GET as per the spec (v20)
2011-08-15 23:30:47 +01:00
0643395b2e
Supports OAuth Providers that don't end connections neatly (Google!)
2011-08-15 23:27:06 +01:00
5707c480df
Adding a configuration mechanism (that may not stay) to allow overriding of the name of the access token used when requesting resources
2011-06-30 00:03:22 +01:00
349d258b1f
Updated the Oauth2 code to work with the new https api
2011-02-06 19:52:44 +00:00
2c0b8c3b79
Fixes issue 17 - Handles rev07 and above of the OAuth spec
2010-12-12 22:38:56 +00:00
ea09e67244
Error object rather than string in OAuth2 as well.
2010-08-24 06:12:49 +08:00
ca370f3f5a
Added new get method to OAuth2. Deprecated older getProtectedResource method
2010-08-05 22:49:55 +01:00
09d613cd46
Bumping to 0.7.3 oauth 2 now sending a Content-Length header of 0 to
...
play well with github/nginx.
2010-06-01 21:03:23 +01:00
6b7b8f3198
Added in some basic (but working) OAuth2 support
...
no specs :( .. I suck.
2010-05-02 15:43:10 +01:00
