search

strongloop / loopback-component-oauth2

oAuth 2.0 server for LoopBack
http://www.strongloop.com
Other
62 stars 63 forks source link

check grant type of client requesting code or access token #12

Closed yunchancho closed 9 years ago

yunchancho commented 9 years ago

Authentication server needs to check grant type of client when it request authorization code or access token. if instance of 'Application' model for the client has 'grantTypes' property, authentication server check if requested type is allowed.

Additionally, I add another patch checking user data regarding email verification.

slnode commented 9 years ago

Can one of the admins verify this patch? To accept patch and trigger a build add comment ".ok\W+to\W+test."

raymondfeng commented 9 years ago

BTW, we should extend to check `scopes', 'tokenTypes' etc.

raymondfeng commented 9 years ago

I'm adding more checks to https://github.com/strongloop/loopback-component-oauth2/pull/18