public
nobgit
read
NobMail
Based on mailcow: dockerized
Languages
Repository composition by tracked source files.
PHP
49%
JavaScript
35%
HTML
9%
CSS
4%
Shell
2%
Python
1%
Lua
0%
Perl
0%
Ruby
0%
SCSS
0%
Create file
Wiki Documentation
Clone
https://nobgit.com/orgs/nobgit/nobmail.git
ssh://[email protected]:2222/orgs/nobgit/nobmail.git
Trace
data/web/inc/lib/vendor/bshaffer/oauth2-server-php/CHANGELOG.md
Trace helps you understand code history line by line. See who changed each line, when it changed, and which commit introduced it.
Author
Date
Commit
Line
Code
1
CHANGELOG for 1.x
2
=================
4
This changelog references the relevant changes (bug and security fixes) done
5
in 1.x minor versions.
7
To see the files changed for a given bug, go to https://github.com/bshaffer/oauth2-server-php/issues/### where ### is the bug number
8
To get the diff between two versions, go to https://github.com/bshaffer/oauth2-server-php/compare/v1.0...v1.1
9
To get the diff for a specific change, go to https://github.com/bshaffer/oauth2-server-php/commit/XXX where XXX is the change hash
11
* 1.10.0 (2017-11-15)
13
PR: https://github.com/bshaffer/oauth2-server-php/pull/889
15
* #795 - [feature] added protected createPayload method to allow easier customization of JWT payload
16
* #807 - [refactor] simplifies UserInfoController constructor
17
* #814 - [docs] Adds https to README link
18
* #827 - [testing] Explicitly pulls in phpunit 4
19
* #828 - [docs] PHPDoc improvements and type hinting of variables.
20
* #829 - [bug] Fix CORS issue for revoking and requesting an access token
21
* #869 - [testing] Remove php 5.3 from travis and use vendored phpunit
22
* #834 - [feature] use random_bytes if available
23
* #851 - [docs] Fix PHPDoc
24
* #872 - [bug] Fix count() error on PHP 7.2
25
* #873 - [testing] adds php 7.2 to travis
26
* #794 - [docs] Fix typo in composer.json
27
* #885 - [testing] Use PHPUnit\Framework\TestCase instead of PHPUnit_Framework_TestCase
29
* 1.9.0 (2017-01-06)
31
PR: https://github.com/bshaffer/oauth2-server-php/pull/788
33
* bug #645 - Allow null for client_secret
34
* bug #651 - Fix bug in isPublicClient of Cassandra Storage
35
* bug #670 - Bug in client's scope restriction
36
* bug #672 - Implemented method to override the password hashing algorithm
37
* bug #698 - Fix Token Response's Content-Type to application/json
38
* bug #729 - Ensures unsetAccessToken and unsetRefreshToken return a bool
39
* bug #749 - Fix UserClaims for CodeIdToken
40
* bug #784 - RFC6750 compatibility
41
* bug #776 - Fix "redirect_uri_mismatch" for URIs with encoded characters
42
* bug #759 - no access token supplied to resource controller results in empty request body
43
* bug #773 - Use OpenSSL random method before attempting Mcrypt's.
44
* bug #790 - Add mongo db
46
* 1.8.0 (2015-09-18)
48
PR: https://github.com/bshaffer/oauth2-server-php/pull/643
50
* bug #594 - adds jti
51
* bug #598 - fixes lifetime configurations for JWTs
52
* bug #634 - fixes travis builds, upgrade to containers
53
* bug #586 - support for revoking tokens
54
* bug #636 - Adds FirebaseJWT bridge
55
* bug #639 - Mongo HHVM compatibility
57
* 1.7.0 (2015-04-23)
59
PR: https://github.com/bshaffer/oauth2-server-php/pull/572
61
* bug #500 - PDO fetch mode changed from FETCH_BOTH to FETCH_ASSOC
62
* bug #508 - Case insensitive for Bearer token header name ba716d4
63
* bug #512 - validateRedirectUri is now public
64
* bug #530 - Add PublicKeyInterface, UserClaimsInterface to Cassandra Storage
65
* bug #505 - DynamoDB storage fixes
66
* bug #556 - adds "code id_token" return type to openid connect
67
* bug #563 - Include "issuer" config key for JwtAccessToken
68
* bug #564 - Fixes JWT vulnerability
69
* bug #571 - Added unset_refresh_token_after_use option
71
* 1.6 (2015-01-16)
73
PR: https://github.com/bshaffer/oauth2-server-php/pull/496
75
* bug 437 - renames CryptoToken to JwtAccessToken / use_crypto_tokens to use_jwt_access_tokens
76
* bug 447 - Adds a Couchbase storage implementation
77
* bug 460 - Rename JWT claims to match spec
78
* bug 470 - order does not matter for multi-valued response types
79
* bug 471 - Make validateAuthorizeRequest available for POST in addition to GET
80
* bug 475 - Adds JTI table definitiion
81
* bug 481 - better randomness for generating access tokens
82
* bug 480 - Use hash_equals() for signature verification (prevents remote timing attacks)
83
* bugs 489, 491, 498 - misc other fixes
85
* 1.5 (2014-08-27)
87
PR: https://github.com/bshaffer/oauth2-server-php/pull/446
89
* bug #399 - Add DynamoDB Support
90
* bug #404 - renamed error name for malformed/expired tokens
91
* bug #412 - Openid connect: fixes for claims with more than one scope / Add support for the prompt parameter ('consent' and 'none')
92
* bug #411 - fixes xml output
93
* bug #413 - fixes invalid format error
94
* bug #401 - fixes code standards / whitespace
95
* bug #354 - bundles PDO SQL with the library
96
* [BC] bug #397 - refresh tokens should not be encrypted
97
* bug #423 - makes "scope" optional for refresh token storage
99
* 1.4 (2014-06-12)
101
PR: https://github.com/bshaffer/oauth2-server-php/pull/392
103
* bug #189 Storage\PDO - allows DSN string in constructor
104
* bug #233 Bearer Tokens - allows token in request body for PUT requests
105
* bug #346 Fixes open_basedir warning
106
* bug #351 Adds OpenID Connect support
107
* bug #355 Adds php 5.6 and HHVM to travis.ci testing
108
* [BC] bug #358 Adds `getQueryStringIdentifier()` to the GrantType interface
109
* bug #363 Encryption\JWT - Allows for subclassing JWT Headers
110
* bug #349 Bearer Tokens - adds requestHasToken method for when access tokens are optional
111
* bug #301 Encryption\JWT - fixes urlSafeB64Encode(): ensures newlines are replaced as expected
112
* bug #323 ResourceController - client_id is no longer required to be returned when calling getAccessToken
113
* bug #367 Storage\PDO - adds Postgres support
114
* bug #368 Access Tokens - use mcrypt_create_iv or openssl_random_pseudo_bytes to create token string
115
* bug #376 Request - allows case insensitive headers
116
* bug #384 Storage\PDO - can pass in PDO options in constructor of PDO storage
117
* misc fixes #361, #292, #373, #374, #379, #396
118
* 1.3 (2014-02-27)
120
PR: https://github.com/bshaffer/oauth2-server-php/pull/325
122
* bug #311 adds cassandra storage
123
* bug #298 fixes response code for user credentials grant type
124
* bug #318 adds 'use_crypto_tokens' config to Server class for better DX
125
* [BC] bug #320 pass client_id to getDefaultScope
126
* bug #324 better feedback when running tests
127
* bug #335 adds support for non-expiring refresh tokens
128
* bug #333 fixes Pdo storage for getClientKey
129
* bug #336 fixes Redis storage for expireAuthorizationCode
131
* 1.3 (2014-02-27)
133
PR: https://github.com/bshaffer/oauth2-server-php/pull/325
135
* bug #311 adds cassandra storage
136
* bug #298 fixes response code for user credentials grant type
137
* bug #318 adds 'use_crypto_tokens' config to Server class for better DX
138
* bug #320 pass client_id to getDefaultScope
139
* bug #324 better feedback when running tests
140
* bug #335 adds support for non-expiring refresh tokens
141
* bug #333 fixes Pdo storage for getClientKey
142
* bug #336 fixes Redis storage for expireAuthorizationCode
144
* 1.2 (2014-01-03)
146
PR: https://github.com/bshaffer/oauth2-server-php/pull/288
148
* bug #285 changed response header from 200 to 401 when empty token received
149
* bug #286 adds documentation and links to spec for not including error messages when no token is supplied
150
* bug #280 ensures PHP warnings do not get thrown as a result of an invalid argument to $jwt->decode()
151
* bug #279 predis wrong number of arguments
152
* bug #277 Securing JS WebApp client secret w/ password grant type
154
* 1.1 (2013-12-17)
156
PR: https://github.com/bshaffer/oauth2-server-php/pull/276
158
* bug #278 adds refresh token configuration to Server class
159
* bug #274 Supplying a null client_id and client_secret grants API access
160
* bug #244 [MongoStorage] More detailed implementation info
161
* bug #268 Implement jti for JWT Bearer tokens to prevent replay attacks.
162
* bug #266 Removing unused argument to getAccessTokenData
163
* bug #247 Make Bearer token type consistent
164
* bug #253 Fixing CryptoToken refresh token lifetime
165
* bug #246 refactors public key logic to be more intuitive
166
* bug #245 adds support for JSON crypto tokens
167
* bug #230 Remove unused columns in oauth_clients
168
* bug #215 makes Redis Scope Storage obey the same paradigm as PDO
169
* bug #228 removes scope group
170
* bug #227 squelches open basedir restriction error
171
* bug #223 Updated docblocks for RefreshTokenInterface.php
172
* bug #224 Adds protected properties
173
* bug #217 Implement ScopeInterface for PDO, Redis
175
* 1.0 (2013-08-12)
177
* bug #203 Add redirect\_status_code config param for AuthorizeController
178
* bug #205 ensures unnecessary ? is not set when ** bug
179
* bug #204 Fixed call to LogicException
180
* bug #202 Add explode to checkRestrictedGrant in PDO Storage
181
* bug #197 adds support for 'false' default scope ** bug
182
* bug #192 reference errors and adds tests
183
* bug #194 makes some appropriate properties ** bug
184
* bug #191 passes config to HttpBasic
185
* bug #190 validates client credentials before ** bug
186
* bug #171 Fix wrong redirect following authorization step
187
* bug #187 client_id is now passed to getDefaultScope().
188
* bug #176 Require refresh_token in getRefreshToken response
189
* bug #174 make user\_id not required for refresh_token grant
190
* bug #173 Duplication in JwtBearer Grant
191
* bug #168 user\_id not required for authorization_code grant
192
* bug #133 hardens default security for user object
193
* bug #163 allows redirect\_uri on authorization_code to be NULL in docs example
194
* bug #162 adds getToken on ResourceController for convenience
195
* bug #161 fixes fatal error
196
* bug #163 Invalid redirect_uri handling
197
* bug #156 user\_id in OAuth2\_Storage_AuthorizationCodeInterface::getAuthorizationCode() response
198
* bug #157 Fix for extending access and refresh tokens
199
* bug #154 ResponseInterface: getParameter method is used in the library but not defined in the interface
200
* bug #148 Add more detail to examples in Readme.md