david / django-oauth / changesets — bitbucket.org

david / django-oauth (http://oauth.net/)

Support of OAuth in Django.

Clone this repository (size: 114.5 KB): HTTPS / SSH

$ hg clone http://code.welldev.org/django-oauth/

$ hg clone ssh://hg@bitbucket.org/david/django-oauth/

1
2
3
4
»

less / more

Changesets

2010-02-22

commit 52:	549a34c81394
parent 51:	d057b386362a

0 1 0

Fix , add comments for the reuse of signatures in tests, thanks again @mohangk defaulttip

commit 51:	d057b386362a
parent 50:	9c805458a458

0 1 0

Fix , oauth_callback_confirmed now returns 'error' if not True, not anymore hardcoded to ease debugging

2010-02-16

commit 50:	9c805458a458
parent 49:	fab39feff68e

0 2 0

Can't find a way to fix tests in a clean way with custom content_type and Django's test Client, at least tests are not anymore broken...

2010-02-03

commit 49:	fab39feff68e
parent 48:	97ce3e2f9430

0 1 0

make this work with multipart

2010-01-30

commit 48:	97ce3e2f9430
parent 47:	aa3ed686b9d4

0 1 0

Allow settings to override default lengths.

2009-11-20

commit 47:	aa3ed686b9d4
parent 46:	a28ff5a1ae38

0 1 0

oauth_provider.views: Ensure that HttpResponseBadRequest is imported.

Mark Lee
4 months ago

2009-10-21

commit 46:	a28ff5a1ae38
parent 45:	7cb2d808b612

0 1 0

Added tag 1.1 for changeset 7cb2d808b612

commit 45:	7cb2d808b612
parent 44:	8fe02f01ca4a

0 1 0

This is the time for a 1.1 release. 1.1

commit 44:	8fe02f01ca4a
parent 43:	4ec55f467733

0 1 0

Link the test user to the consumer in tests, fix . Thanks Matthieu Tourne.

commit 43:	4ec55f467733
parent 42:	02962bee73ef

0 1 0

This is a STRONGLY recommended update. The issue, found by Matthieu Huguet, comes from Token/Consumer.generate_random_codes functions which test the key AND secret combination and not key OR secret. This is not a security issue because stores.DataStore.lookup_consumer/lookup_token tries to retrieve the token with an objects.get so it will raise a model.MultipleObjectsReturned error in case there are two similar keys. But you must be careful if you have customized the store. Please contact me (http://larlet.com) if you'd like to be added to the django-oauth-security mailing-list for future security announcements.

2009-10-07

commit 42:	02962bee73ef
parent 41:	dccb76f25f3f

0 1 0

Give a way to know if the authorization succeed or not to the callback view, you can now test on passed args if there is a token or an error. Thanks Toby White.

commit 41:	dccb76f25f3f
parent 40:	f1b7357ed7ba

0 1 0

Partly revert previous commit, authorize_access wasn't evaluated as a boolean.

commit 40:	f1b7357ed7ba
parent 39:	444b2446c572

0 1 0

More robust authorize access test. Thanks Toby White.

commit 39:	444b2446c572
parent 38:	c80b48e63390

0 1 0

Fix a bug, request.environ only exists in a WSGI environment. Thanks Toby White.

commit 38:	c80b48e63390
parent 37:	cf6929353bd9

0 2 0

Add a way to restrict signature methods (to avoid plaintext for instance). Thanks Toby White.