Install
Works with Drupal: 7.xUsing Composer to manage Drupal site dependencies
Downloads
Download tar.gz
37.97 KB
MD5: 7214e23d50a0e378c36eb6b442b9f22e
SHA-1: 0aa4883e42e86f5494007a5a2aba69167ef96810
SHA-256: c6bf9c04a1d3e41a3840fa67613a1e4b8f40a0601cf24ba2782ac57a19074aa4
Download zip
51.38 KB
MD5: 1b1295af003f0d49fcd967aa9500bc20
SHA-1: b32f8db1de3873493dad1c56cca80df9e4d8bce3
SHA-256: 59b769ce13be10aef1a5f9c2d43d8480f55fffa3278f9178232864d94b83c2cd
Release notes
Works with oauth2-server-php v1.4 and v1.5
Major changes:
- OpenID Connect support
- JSON Web Token (JWT) grant type support
- Per-client grant types
- Password grant type now also supports email/password in addition to username/password
Changes since 7.x-1.0:
- #2276543 by esteve.badia: Fixed Replace entity_load $conditions usage with EntityfieldQuery.
- Create the profile scope by default when OpenID Connect is enabled.
- Return the user's timezone from the UserInfo endpoint.
- Fix typo in oauth2_server_authorization_code_load_multiple().
- Don't expire non-expiring refresh tokens.
- #1981646: Implement OpenID Connect.
- Fix wrong variable name in checkRestrictedGrantType().
- Indicate support for non-expiring refresh tokens.
- Delete expired tokens on cron.
- 2199541 by balintk: Append 'page' to all page callback function names.
- Fix update errors.
- #2193997: Add per-client grant types.
- Allow the password credentials grant flow to work with an email&password.
- #2187425: Handle denied authorization properly.
- Reorder the hooks in oauth2_server.api.php
- Don't create a default scope for each server, it has no purpose out of the box.
- #2168539: Add support for crypto tokens.
- Add functionality for generating keys.
- Update README
- Simply the Services integration now that #1154420 has landed.
- Fix a bug in the previous commit.
- #1934038: Implement the JWT grant type.
- Clean up oauth2_server_start() in preparation for the JWT work.
- Clarify PHP requirement, it's PHP 5.3.9+
- Implement additional method for compatibility with library versions v1.2+
- checkClientCredentials() should handle the case where the client wasn't found.
- Restore compatibility with oauth2-server-php v1.2