e82b70eb53
Database authenticator behaviour / Pleroma implementation refactoring.
6 years ago
e278d47023
OpenLDAP support
6 years ago
1097ce6d9f
Auth customization support.
...
OAuthController#create_authorization user retrieval / creation, errors handling, template & layout selection.
6 years ago
bc4f77b10b
[ #468 ] Merged `upstream/develop`, resolved conflicts.
6 years ago
dcf24a3233
[ #468 ] Refactored OAuth scopes' defaults & missing selection handling.
6 years ago
2a4a4f3342
[ #468 ] Defined OAuth restrictions for all applicable routes.
...
Improved missing "scopes" param handling.
Allowed "any of" / "all of" mode specification in OAuthScopesPlug.
Fixed auth UI / behavior when user selects no permissions at /oauth/authorize.
6 years ago
027adbc9e5
[ #468 ] Refactored OAuth scopes parsing / defaults handling.
6 years ago
e9ef4b8da6
oauth: never use base64 padding when returning tokens to applications
...
The normal Base64 alphabet uses the equals sign (=) as a padding character. Since
Base64 strings are self-synchronizing, padding characters are unnecessary, so don't
generate them in the first place.
6 years ago
063baca5e4
[ #468 ] User UI for OAuth permissions restriction. Standardized storage format for `scopes` fields, updated usages.
6 years ago
6a6a5b3251
de-group alias/es
6 years ago
4ad843fb9d
[ #468 ] Prototype of OAuth2 scopes support. TwitterAPI scope restrictions.
6 years ago
2c68cf7e9e
OAuth2 security fixes: redirect URI validation, "Mastodon-Local" security breach fix.
...
(`POST /api/v1/apps` could create "Mastodon-Local" app wth any redirect_uris,
and if that happened before /web/login is accessed for the first time
then Pleroma used this externally created record with arbitrary
redirect_uris and client_secret known by creator).
6 years ago
980b5288ed
update copyright years to 2019
6 years ago
2791ce9a1f
add license boilerplate to pleroma core
6 years ago
b096e30cff
[ #114 ] Added email confirmation resend action. Added tests
...
for registration, authentication, email confirmation, confirmation resending.
Made admin methods create confirmed users.
6 years ago
1de0aa2f10
[ #114 ] Account confirmation email, registration as unconfirmed (config-based), auth prevention for unconfirmed.
6 years ago
074fa790ba
fix compile warnings
6 years ago
419ed3a0ca
oauth: fix token decode regression
6 years ago
4f640c43ed
Unify Mastodon Login with OAuth login.
...
This removes duplication in the login code.
6 years ago
801d645c6b
TASK: Fix formatting
6 years ago
b79c126ee0
Add missing URL encoding in create authorization redirect
6 years ago
84d84e4ca4
OAuth: Support /revoke endpoint for revoking tokens
...
(for compatibility with Mastodon)
6 years ago
ad2a7972e7
OAuth: Set `created_at` in token exchange response
...
(for compatibility with Mastodon)
6 years ago
2c303b3302
Merge branch 'bugfix/oauth2-param-name' into 'develop'
...
oauth: support either name or username parameter with grant_type=password
Closes #180
See merge request pleroma/pleroma!219
6 years ago
5442466569
oauth: fix password-based login when username is email address
...
closes #199
6 years ago
4894b88b1b
oauth: support either name or username parameter with grant_type=password
...
closes #180
6 years ago
3607dc4558
Make token exchange return errors with 400 as status code
6 years ago
73904e8f78
Make OAuth token endpoint work with HTTP Basic auth
...
client_id/client_secret can now be supplied in an Authorization header
6 years ago
9e6ae44729
Formatting fixes.
7 years ago
947431e9aa
MastoAPI and OAuth: allow login with either email or username.
7 years ago
4afbef39f4
Format the code.
7 years ago
dd21137f38
oauth: implement grant_type=password for single-page apps
7 years ago
bdb5dd2194
Create action_fallback for username/password incorrect input
7 years ago
fd12e585c9
Handle existing redirect params.
7 years ago
b0e27b21dd
Fix tootdon logins.
7 years ago
5602293690
Fix callback state.
7 years ago
ac3f32da7e
Preserve state in oauth
7 years ago
5fe9e4dd3f
Do oauth redirect.
7 years ago
59dd240c08
Use token exchange method.
7 years ago
2652d9e4ed
Slight cleanup.
7 years ago
2a298d70f9
Add very basic oauth and mastodon api support.
7 years ago
Ivan Tashkinov