aboutsummaryrefslogtreecommitdiffstats
path: root/mediagoblin/oauth/views.py
Commit message (Collapse)AuthorAgeFilesLines
* Apply pyupgrade --py36-plus.Ben Sturmfels2021-09-231-3/+3
| | | | This removes some 'u' prefixes and converts simple format() calls to f-strings.
* Remove remaining imports/calls to six not automatically removed by pyupgrade.Ben Sturmfels2021-03-051-2/+0
|
* Apply `pyupgrade --py3-plus` to remove Python 2 compatibility code.Ben Sturmfels2021-03-051-11/+11
|
* Merge branch 'stable'Christopher Allan Webber2015-12-201-0/+10
|\
| * Fix security issue in OAuth verifier validationJessica Tallon2015-12-191-0/+10
| |
* | Fix #5353 - Bug in OAuth which referenced "user"Jessica Tallon2015-10-171-1/+1
| | | | | | | | | | | | | | There was a recent change in 0f3bf8d where several names which were used to refer the actor where renamed to the standard "actor" property name. There were some places in the OAuth decorator and the OAuth views where the old names were still referred. This fixes that.
* | Fix #5344 - OAuth NotImplemented exceptionJessica Tallon2015-08-211-1/+1
|/ | | | | | | | | | | | This introduces a migration which adds a dummy Client, RequestToken and AccessToken. These are used when an invalid request comes in, instead of bailing early, it needs dummy data to prevent timing attacks. This then implements the methods which get the IDs of the dummy objects. If these are changed in the future a migration which checks for the previous dummy object should be created and updates them to reflect the new IDs/tokens.
* Fix #1057 - unquote redirection URL on successful OAuth authorizationJessica Tallon2014-12-081-1/+5
|
* Fix typo in client registration API for logo_uriJessica Tallon2014-10-021-4/+4
|
* Fix Content-Disposition error for retrieving OAuth request tokensJessica Tallon2014-09-241-4/+0
|
* Merge branch 'master' into merge-python3-portChristopher Allan Webber2014-09-161-7/+8
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Has some issues, will iteratively fix! Conflicts: mediagoblin/gmg_commands/__init__.py mediagoblin/gmg_commands/deletemedia.py mediagoblin/gmg_commands/users.py mediagoblin/oauth/views.py mediagoblin/plugins/api/views.py mediagoblin/tests/test_api.py mediagoblin/tests/test_edit.py mediagoblin/tests/test_oauth1.py mediagoblin/tests/test_util.py mediagoblin/tools/mail.py mediagoblin/webfinger/views.py setup.py
| * Tidy up federation code and add tests to cover more of the APIsJessica Tallon2014-08-181-1/+0
| |
| * Use oauthlib's safe characters when generating client_key and client_secretJessica Tallon2014-08-181-4/+3
| |
| * Fix problem in OAuth viewsJessica Tallon2014-07-221-1/+2
| |
| * Allow crypto.random_string to take optional alphabet paramJessica Tallon2014-07-081-5/+8
| |
* | Use isinstance and six.text_type to check types of an object.Berker Peksag2014-07-281-2/+4
|/
* not all JSONEncoded fields should be mutable dictsRodney Ewing2013-09-191-25/+25
|
* Renames OAuth1 code to federationxray72242013-07-221-0/+339