Version 1.4.1

• Banned users and spammers can no longer use the OAuth interface.

Version 1.4.0

• Adds support for IPS v4.2.x
• Allow disabling use of the global template on the authorization page (can help work around some workflow issues)

Version 1.3.0

Changes:

• Fix execute permissions on interface pages (visit ACP > Community > OAuth2 Server > Applications to fix)
• Fix double-login required on initial visit (RFC3986 compatible argument passing)
• Enable site template on authorization page
• Allow localisation of "Yes" and "No" on authorization page

Closes #16
Closes #6
Closes #7

Version 1.2.3

Fix regression of expiretokens task.

Note: If tasks refuse to run in your IPS instance, it may be necessary to run the following command against your IPS SQL database to fix the OAuth 2installation:

DELETE FROM enco_core_tasks WHERE `key` = 'expire_tokens';

The alternative should be to fully uninstall, then reinstall the OAuth2 Server application.

Version 1.2.1

• Language strings are now used for all text in the authorization form template displayed to first-time users of the OAuth integration.
• New scope support for user reputation points. Request user.reputation in the scope string for this data. (Thanks @Recouse !)

Version 1.2.0

• Fixes for IPS 4.1.14. Note that v1.2.0 is not backwards compatible with 4.1.13 and below. For older IPS releases, please continue to use v1.0.1.
• Scope support is complete and now recommended for Rocket.Chat integration.
  • Allowed scopes can be specified in the ACP on a per-application basis
  • Scopes can (and should!) be specified on initial authorization requests. If none is specified, all allowed scopes for the application are authorized.
  • The initial form that displays to users asking them to approve the authorization request lists which scopes are being requested by the OAuth Application (Client)
  • User primary and secondary group information is available by adding the user.groups scope to your initial authorization request.
• Rocket.Chat integration steps are documented in an included RocketChat-Readme.html file which is viewable at https://github.com/wohali/ips4-oauth2-server/blob/master/Rocket.Chat.md.
• Up-to-date documentation can always be found at GitHub in the repo.

Version 1.0.1

Patch update to incorporate:

• CSRF token validation on authorization form
• Incorrectly named cleanup task

Initial Release

First release of the IPS4 OAuth2 Server application.