Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Merge branch 'stable' | Christopher Allan Webber | 2015-12-20 | 2 | -0/+21 |
|\ | |||||
| * | Fix security issue in OAuth verifier validation | Jessica Tallon | 2015-12-19 | 2 | -0/+21 |
| | | |||||
* | | Fix #5353 - Bug in OAuth which referenced "user" | Jessica Tallon | 2015-10-17 | 2 | -7/+7 |
| | | | | | | | | | | | | | | There was a recent change in 0f3bf8d where several names which were used to refer the actor where renamed to the standard "actor" property name. There were some places in the OAuth decorator and the OAuth views where the old names were still referred. This fixes that. | ||||
* | | Fix #5344 - OAuth NotImplemented exception | Jessica Tallon | 2015-08-21 | 3 | -8/+43 |
|/ | | | | | | | | | | | | This introduces a migration which adds a dummy Client, RequestToken and AccessToken. These are used when an invalid request comes in, instead of bailing early, it needs dummy data to prevent timing attacks. This then implements the methods which get the IDs of the dummy objects. If these are changed in the future a migration which checks for the previous dummy object should be created and updates them to reflect the new IDs/tokens. | ||||
* | Fix #1057 - unquote redirection URL on successful OAuth authorization | Jessica Tallon | 2014-12-08 | 1 | -1/+5 |
| | |||||
* | Fix OAuth length problems in clients by removing that constraint | Jessica Tallon | 2014-12-08 | 1 | -3/+11 |
| | |||||
* | Partial fix #1048 - Don't require as long nonce | Jessica Tallon | 2014-12-05 | 1 | -0/+4 |
| | |||||
* | Fix #1016 - Covert the timestamp from seconds to datetime object | Jessica Tallon | 2014-11-04 | 1 | -0/+9 |
| | |||||
* | Fix typo in client registration API for logo_uri | Jessica Tallon | 2014-10-02 | 1 | -4/+4 |
| | |||||
* | Fix Content-Disposition error for retrieving OAuth request tokens | Jessica Tallon | 2014-09-24 | 1 | -4/+0 |
| | |||||
* | Merge branch 'master' into merge-python3-port | Christopher Allan Webber | 2014-09-16 | 3 | -21/+20 |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Has some issues, will iteratively fix! Conflicts: mediagoblin/gmg_commands/__init__.py mediagoblin/gmg_commands/deletemedia.py mediagoblin/gmg_commands/users.py mediagoblin/oauth/views.py mediagoblin/plugins/api/views.py mediagoblin/tests/test_api.py mediagoblin/tests/test_edit.py mediagoblin/tests/test_oauth1.py mediagoblin/tests/test_util.py mediagoblin/tools/mail.py mediagoblin/webfinger/views.py setup.py | ||||
| * | Tidy up federation code and add tests to cover more of the APIs | Jessica Tallon | 2014-08-18 | 1 | -1/+0 |
| | | |||||
| * | Use oauthlib's safe characters when generating client_key and client_secret | Jessica Tallon | 2014-08-18 | 1 | -4/+3 |
| | | |||||
| * | Fix problem in OAuth views | Jessica Tallon | 2014-07-22 | 1 | -1/+2 |
| | | |||||
| * | Clean up & Add support to update objects in feed API | Jessica Tallon | 2014-07-22 | 1 | -9/+7 |
| | | |||||
| * | Add basic upload image capabilities | xray7224 | 2014-07-22 | 1 | -1/+1 |
| | | |||||
| * | Support some webfinger API's and real profile and /api/user/<user>/ | xray7224 | 2014-07-22 | 1 | -4/+4 |
| | | |||||
| * | Allow crypto.random_string to take optional alphabet param | Jessica Tallon | 2014-07-08 | 1 | -5/+8 |
| | | |||||
* | | Use isinstance and six.text_type to check types of an object. | Berker Peksag | 2014-07-28 | 1 | -2/+4 |
|/ | |||||
* | not all JSONEncoded fields should be mutable dicts | Rodney Ewing | 2013-09-19 | 1 | -25/+25 |
| | |||||
* | Fix problem causing exception when invalid Authentication header provided | xray7224 | 2013-07-29 | 1 | -2/+5 |
| | |||||
* | Renames OAuth1 code to federation | xray7224 | 2013-07-22 | 9 | -0/+612 |