GitHub · Where software is built

Labels Milestones New issue

Redirect URI is not checked against client's registered URIs

#96

· tamjidrahat opened

on Jun 28, 2022

When the pair client_id/client_secret is not provided in request body, check Authorization header

#94

· rossitsaborissova opened

on Apr 29, 2018

Authentication for /oauth20/auth-codes endpoint?

#82

· cat-mucius opened

on Apr 19, 2017

Change the HTTP status when an access token revocation is not successful

#64

· rossitsaborissova opened

on Oct 10, 2015

Add support for TLS/SSL

#63

· anshnd opened

on Oct 6, 2015

When DELETE a scope that is already assigned to a client application, return 400 Bad Request

#49

· rossitsaborissova opened

on Mar 6, 2015

Invalidate access tokens when the corresponding client app is deactivated

#45

· rossitsaborissova opened

on Feb 19, 2015

Add service delete application

#41

· rossitsaborissova opened

on Dec 28, 2014

Add startup script

#38

· rossitsaborissova opened

on Dec 12, 2014

Change error message when trying to obtain access token for inactive client app

#37

· rossitsaborissova opened

on Dec 12, 2014

Issue client app password that will be used for Basic Authorization

#25

· rossitsaborissova opened

on Oct 18, 2014

Read alternatively client_id from Basic Authorization header

#24

· rossitsaborissova opened

on Oct 18, 2014