aboutsummaryrefslogtreecommitdiffstats
path: root/mediagoblin/oauth/oauth.py
Commit message (Collapse)AuthorAgeFilesLines
* Apply `pyupgrade --py3-plus` to remove Python 2 compatibility code.Ben Sturmfels2021-03-051-5/+5
|
* Merge branch 'stable'Christopher Allan Webber2015-12-201-0/+11
|\
| * Fix security issue in OAuth verifier validationJessica Tallon2015-12-191-0/+11
| |
* | Fix #5353 - Bug in OAuth which referenced "user"Jessica Tallon2015-10-171-6/+6
| | | | | | | | | | | | | | There was a recent change in 0f3bf8d where several names which were used to refer the actor where renamed to the standard "actor" property name. There were some places in the OAuth decorator and the OAuth views where the old names were still referred. This fixes that.
* | Fix #5344 - OAuth NotImplemented exceptionJessica Tallon2015-08-211-7/+36
|/ | | | | | | | | | | | This introduces a migration which adds a dummy Client, RequestToken and AccessToken. These are used when an invalid request comes in, instead of bailing early, it needs dummy data to prevent timing attacks. This then implements the methods which get the IDs of the dummy objects. If these are changed in the future a migration which checks for the previous dummy object should be created and updates them to reflect the new IDs/tokens.
* Fix OAuth length problems in clients by removing that constraintJessica Tallon2014-12-081-3/+11
|
* Partial fix #1048 - Don't require as long nonceJessica Tallon2014-12-051-0/+4
|
* Fix #1016 - Covert the timestamp from seconds to datetime objectJessica Tallon2014-11-041-0/+9
|
* Clean up & Add support to update objects in feed APIJessica Tallon2014-07-221-9/+7
|
* Add basic upload image capabilitiesxray72242014-07-221-1/+1
|
* Renames OAuth1 code to federationxray72242013-07-221-0/+132