prosody-modules
67777cb7353d
mod_http_oauth2/mod_http_oauth2.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody-modules

Log

mod_http_oauth2/mod_http_oauth2.lua @ 5276:67777cb7353d

less more | (0) -64 tip
description author age
mod_http_oauth2: Pedantic optimization Kim Alvefur Sun, 26 Mar 2023 14:37:42 +0200
mod_http_oauth2: Fix traceback on missing 'scope' parameter Kim Alvefur Fri, 24 Mar 2023 00:07:58 +0100
mod_http_oauth2: Allow user to decide which requested scopes to grant Kim Alvefur Thu, 23 Mar 2023 16:28:08 +0100
mod_http_oauth2: Remove another reference to obsolete function Kim Alvefur Wed, 22 Mar 2023 00:09:58 +0100
mod_http_oauth2: Relax payload content type checking in revocation Kim Alvefur Tue, 21 Mar 2023 22:29:47 +0100
mod_http_oauth2: Remove now unused code Kim Alvefur Tue, 21 Mar 2023 22:23:28 +0100
mod_http_oauth2: Allow revoking a token without OAuth client credentials Kim Alvefur Tue, 21 Mar 2023 22:02:38 +0100
mod_http_oauth2: Correctly verify OAuth client credentials on revocation Kim Alvefur Tue, 21 Mar 2023 21:57:18 +0100
mod_http_oauth2: Group metadata section into OAuth and OpenID Kim Alvefur Tue, 21 Mar 2023 21:45:02 +0100
mod_http_oauth2: Rename oauth client credential related functions Kim Alvefur Tue, 21 Mar 2023 21:36:54 +0100
mod_http_oauth2: Refactor to allow reuse of OAuth client creation Kim Alvefur Sun, 19 Mar 2023 22:13:27 +0100
mod_http_oauth2: Fix userinfo status code off-by-one Kim Alvefur Thu, 16 Mar 2023 19:59:32 +0100
mod_http_oauth2: Implement and return ID Token in authorization code flow Kim Alvefur Thu, 16 Mar 2023 19:28:44 +0100
mod_http_oauth2: Reject non-local hosts in more code paths Kim Alvefur Thu, 16 Mar 2023 17:52:10 +0100
mod_http_oauth2: Add support for the "openid" scope Kim Alvefur Thu, 16 Mar 2023 17:06:35 +0100
mod_http_oauth2: Prepare to handle multiple e.g. non-role scopes Kim Alvefur Thu, 16 Mar 2023 17:03:48 +0100
mod_http_oauth2: Fix attempt to index a boolean value Kim Alvefur Thu, 16 Mar 2023 00:06:43 +0100
mod_http_oauth2: Record details of OAuth client a token is issued to Kim Alvefur Tue, 14 Mar 2023 18:08:25 +0100
mod_http_oauth2: Invoke mod_http_errors to render error on invalid redirect Kim Alvefur Sun, 12 Mar 2023 17:56:23 +0100
mod_http_oauth2: Validate all URIs against client_uri in client registration Kim Alvefur Sun, 12 Mar 2023 12:06:44 +0100
mod_http_oauth2: Organize HTTP routes with comments Kim Alvefur Sun, 12 Mar 2023 11:27:29 +0100
mod_http_oauth2: Fix validation of informative URIs Kim Alvefur Sat, 11 Mar 2023 22:58:47 +0100
mod_http_oauth2: Use more compact IDs Kim Alvefur Sat, 11 Mar 2023 22:46:27 +0100
mod_http_oauth2: Validate that informative URLs match the redirect URIs Kim Alvefur Sat, 11 Mar 2023 22:31:02 +0100
mod_http_oauth2: Reject insecure redirect URIs Kim Alvefur Sat, 11 Mar 2023 22:25:50 +0100
mod_http_oauth2: Validate that redirect URIs are absolute Kim Alvefur Sat, 11 Mar 2023 22:25:22 +0100
mod_http_oauth2: Validate basic URI syntax of redirect URIs Kim Alvefur Sat, 11 Mar 2023 22:30:58 +0100
mod_http_oauth2: Require URL to client informational page in registration Kim Alvefur Sat, 11 Mar 2023 21:13:00 +0100
mod_http_oauth2: Reorder client metadata validation schema Kim Alvefur Sat, 11 Mar 2023 21:11:50 +0100
mod_http_oauth2: Fix to disable disabled response handlers correctly Kim Alvefur Fri, 10 Mar 2023 12:03:23 +0100
mod_http_oauth2: Log flows enabled and disabled Kim Alvefur Fri, 10 Mar 2023 12:01:52 +0100
mod_http_oauth2: Fix appending of query parts in error redirects Kim Alvefur Fri, 10 Mar 2023 11:54:30 +0100
mod_http_oauth2: Implement the OpenID userinfo endpoint Kim Alvefur Thu, 09 Mar 2023 14:46:06 +0100
mod_http_oauth2: token endpoint: handle missing credentials Matthew Wild Tue, 07 Mar 2023 15:33:07 +0000
mod_http_oauth2: Fail early when no authorization header present Matthew Wild Tue, 07 Mar 2023 15:31:19 +0000
mod_http_oauth2: Support HTTP Basic auth on token endpoint Matthew Wild Tue, 07 Mar 2023 15:27:50 +0000
mod_http_oauth2: Separate extracting credentials from requests and verifying Matthew Wild Tue, 07 Mar 2023 15:18:41 +0000
mod_http_oauth2: Reflect ALL attributes of the client registration Matthew Wild Tue, 07 Mar 2023 14:52:43 +0000
mod_http_oauth2: Improve handling of redirect_uri matching and fallback Matthew Wild Tue, 07 Mar 2023 13:19:19 +0000
mod_http_oauth2: Correct field name for HTTP response status code Kim Alvefur Tue, 07 Mar 2023 13:14:25 +0100
mod_http_oauth2: Fix incorrect function name (thanks Zash/luacheck) Matthew Wild Tue, 07 Mar 2023 10:27:40 +0000
mod_http_oauth2: Remove authorization codes after use Kim Alvefur Mon, 06 Mar 2023 16:53:27 +0100
mod_http_oauth2: Fix authorization code logic Kim Alvefur Mon, 06 Mar 2023 16:49:43 +0100
mod_http_oauth2: Switch to '303 See Other' redirects Matthew Wild Mon, 06 Mar 2023 10:37:43 +0000
mod_http_oauth2: Allow non-HTTPS on localhost URLs Matthew Wild Mon, 06 Mar 2023 10:29:14 +0000
mod_http_oauth2: Add authentication, consent and error pages Matthew Wild Mon, 06 Mar 2023 09:46:58 +0000
mod_http_oauth: Factor out issuer URL calculation to a helper function Matthew Wild Mon, 06 Mar 2023 09:40:17 +0000
mod_http_oauth2: Clarify comment referencing mod_http_errors (thanks MattJ) Kim Alvefur Sun, 05 Mar 2023 12:38:20 +0100
mod_http_oauth2: Specify host for which to retrieve list of roles Kim Alvefur Sat, 04 Mar 2023 23:36:13 +0100
mod_http_oauth2: Return list of active roles in discovery Kim Alvefur Sat, 04 Mar 2023 21:36:00 +0100
mod_http_oauth2: Return actually enabled response types in discovery Kim Alvefur Sat, 04 Mar 2023 21:24:35 +0100
mod_http_oauth2: Calculate client secret expiry in registration response Kim Alvefur Sat, 04 Mar 2023 17:06:47 +0100
mod_http_oauth2: Strip trailing '/' from issuer URL Matthew Wild Sat, 04 Mar 2023 13:23:26 +0000
mod_http_oauth2: Advertise endpoints that are enabled Kim Alvefur Fri, 03 Mar 2023 22:54:46 +0100
mod_http_oauth2: Separate client_secret verification key from JWT key Kim Alvefur Fri, 03 Mar 2023 22:48:59 +0100
mod_http_oauth2: Fix response type config Kim Alvefur Fri, 03 Mar 2023 22:48:38 +0100
mod_http_oauth2: Remove error message Kim Alvefur Fri, 03 Mar 2023 22:03:50 +0100
mod_http_oauth2: Mention name of client when giving out OOB authorization code Kim Alvefur Fri, 03 Mar 2023 21:45:24 +0100
mod_http_oauth2: Comment on mutation by other module Kim Alvefur Fri, 03 Mar 2023 21:45:05 +0100
mod_http_oauth2: Implement stateless dynamic client registration Kim Alvefur Fri, 03 Mar 2023 21:14:19 +0100
mod_http_oauth2: Add support for 'iss' authz response parameter (RFC 9207) Matthew Wild Fri, 03 Mar 2023 19:21:38 +0000
mod_http_oauth2: Derive scope from correct user details Kim Alvefur Fri, 03 Mar 2023 18:00:28 +0100
mod_http_oauth2: Fix to actually return OOB response Kim Alvefur Fri, 03 Mar 2023 14:22:05 +0100
mod_http_oauth2: Add OIDC discovery endpoint (thanks Zash) Matthew Wild Fri, 03 Mar 2023 11:24:05 +0000
less more | (0) -64 tip