mod_http_oauth2: token endpoint: handle missing credentials
|
Matthew Wild |
Tue, 07 Mar 2023 15:33:07 +0000 |
mod_http_oauth2: Fail early when no authorization header present
|
Matthew Wild |
Tue, 07 Mar 2023 15:31:19 +0000 |
mod_http_oauth2: Support HTTP Basic auth on token endpoint
|
Matthew Wild |
Tue, 07 Mar 2023 15:27:50 +0000 |
mod_http_oauth2: Separate extracting credentials from requests and verifying
|
Matthew Wild |
Tue, 07 Mar 2023 15:18:41 +0000 |
mod_http_oauth2: Reflect ALL attributes of the client registration
|
Matthew Wild |
Tue, 07 Mar 2023 14:52:43 +0000 |
mod_http_oauth2: Improve handling of redirect_uri matching and fallback
|
Matthew Wild |
Tue, 07 Mar 2023 13:19:19 +0000 |
mod_http_oauth2: Correct field name for HTTP response status code
|
Kim Alvefur |
Tue, 07 Mar 2023 13:14:25 +0100 |
mod_http_oauth2: Fix incorrect function name (thanks Zash/luacheck)
|
Matthew Wild |
Tue, 07 Mar 2023 10:27:40 +0000 |
mod_http_oauth2: Remove authorization codes after use
|
Kim Alvefur |
Mon, 06 Mar 2023 16:53:27 +0100 |
mod_http_oauth2: Fix authorization code logic
|
Kim Alvefur |
Mon, 06 Mar 2023 16:49:43 +0100 |
mod_http_oauth2: Switch to '303 See Other' redirects
|
Matthew Wild |
Mon, 06 Mar 2023 10:37:43 +0000 |
mod_http_oauth2: Allow non-HTTPS on localhost URLs
|
Matthew Wild |
Mon, 06 Mar 2023 10:29:14 +0000 |