apifest apifest-oauth20 issues

apifest / apifest-oauth20

ApiFest OAuth 2.0 Server - API security. The ApiFest OAuth 2.0 Server Java implementation of OAuth 2.0 protocol

http://apifest.com

69 stars 44 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Redirect URI is not checked against client's registered URIs

#96 tamjidrahat opened 2 years ago
0
[Issue #94] When the pair client_id/client_secret is not provided in request body, check Authorization header

#95 rossitsaborissova opened 6 years ago
0
When the pair client_id/client_secret is not provided in request body, check Authorization header

#94 rossitsaborissova opened 6 years ago
0
[Issue #56] redirect_uri should be optional in case of auth code generation

#93 rossitsaborissova closed 6 years ago
0
Fixed client_secret missing if client_id is provided as body param

#92 nilswieber opened 7 years ago
3
[Issue #85] Fix redis scripts for deleting tokens

#91 spiwn closed 7 years ago
0
[Issue #89] Add state in authorization code response

#90 rossitsaborissova closed 7 years ago
0
Add state in authorization code response

#89 rossitsaborissova closed 6 years ago
0
Revert "Update Authorization to return state"

#88 wusgarden closed 7 years ago
6
Update Authorization to return state

#87 wusgarden closed 7 years ago
4
[Issue #85] Allow revoking all of an user's access tokens

#86 spiwn closed 7 years ago
0
Revoke all tokens for a user

#85 spiwn closed 7 years ago
0
[Issue #83] Improve client credentials entropy

#84 msokolovski closed 7 years ago
0
Improve client credentials entropy

#83 msokolovski closed 7 years ago
1
Authentication for /oauth20/auth-codes endpoint?

#82 cat-mucius opened 7 years ago
1
[Issue #80] Remove client_id from access token revoke service

#81 rossitsaborissova closed 7 years ago
0
Remove client_id from access token revoke service

#80 rossitsaborissova closed 7 years ago
0
Adjustaments to application details column in cassandra schema

#79 giovibal closed 7 years ago
0
Cassandra driver updated, added reconnect strategy

#78 giovibal closed 8 years ago
1
[Issue #76] Add a field in the AccessToken for the application details

#77 spiwn closed 8 years ago
0
Allow usage of application details for password tokens

#76 spiwn closed 8 years ago
0
Support for cassandra backend

#75 giovibal closed 8 years ago
2
[Issue #73] - Always empty application list returned when using redis

#74 apostolterziev closed 8 years ago
0
/oauth20/applications always returns [] when using the Redis storage backend

#73 apostolterziev closed 8 years ago
0
[Issue #71] - Use Lua script instead of multiple calls to Redis

#72 apostolterziev closed 8 years ago
0
Use Lua script instead of multiple calls to Redis

#71 apostolterziev closed 8 years ago
0
Need Help in using this project

#70 AnilRahul closed 8 years ago
2
issue 68 - return connection to redis pool properly

#69 apostolterziev closed 8 years ago
0
Return redis connection to pool when registering scopes and updating client applications

#68 apostolterziev closed 8 years ago
0
[Issue #66] Skip converting the body of a request to String

#67 spiwn closed 8 years ago
0
Improve performance of reading json requests

#66 spiwn closed 8 years ago
0
Introduce a ResourceBundle for use by the custom classes jar

#65 spiwn closed 9 years ago
0
Change the HTTP status when an access token revocation is not successful

#64 rossitsaborissova opened 9 years ago
0
Add support for TLS/SSL

#63 anshnd opened 9 years ago
0
added validation for externally submitted client credentials (issue #61)

#62 lyubo-markov-skrill closed 9 years ago
0
Validate the submitted cliend_id and client_secret and return a correct message upon validation

#61 dhskrill closed 8 years ago
0
[Issue #59] Add Content-Length header even if the response is empty

#60 rossitsaborissova closed 9 years ago
0
Add Content-Length header even if the response is empty

#59 rossitsaborissova closed 9 years ago
0
[issue #57] Add appropriate messages when JSON is not valid or input validation does not pass

#58 rossitsaborissova closed 9 years ago
0
Add appropriate messages when JSON is not valid or input validation does not pass

#57 rossitsaborissova closed 9 years ago
0
redirect_uri should be optional in case of auth code generation

#56 rossitsaborissova closed 6 years ago
0
Upgrade Hazelcast version to 3.4.2. Fix an issue into HC implementation of updateAccessTokenValidStatus()

#55 dhskrill closed 9 years ago
0
Upgrade Hazelcast version to 3.4.2. Fix an issue into isValidToken() che...

#54 dhskrill closed 9 years ago
0
[Issue #52] When client_id or client_secret is missing on POST /oauth20/tokens, return "mandatory parameter client_id/client_secret is missing"

#53 rossitsaborissova closed 9 years ago
0
When client_id or client_secret is missing on POST /oauth20/tokens, return "mandatory parameter client_id/client_secret is missing"

#52 rossitsaborissova closed 9 years ago
0
Issue 50

#51 rossitsaborissova closed 9 years ago
0
Return same client application info on GET /oauth20/applications and GET /oauth20/applications/{client_id}

#50 rossitsaborissova closed 9 years ago
0
When DELETE a scope that is already assigned to a client application, return 400 Bad Request

#49 rossitsaborissova opened 9 years ago
0
Add support for scope when issue an access token with grant_type=authorization_code

#48 rossitsaborissova closed 9 years ago
1
[Issue #46] Cleanup startup config

#47 rossitsaborissova closed 9 years ago
0