Releases for OAuth 1.0

Drupal 10 compatibility

This release disallows OAuth protected responses from being cached.

See OAuth - Critical - Access Bypass - SA-CONTRIB-2017-056.

• Add missing oauth_callback_confirmed parameter
• #1238752: Postgres compatability

This release moves credentials from a custom table to the user.data service. This means that the data will now be stored at the users_data table, which is part of Drupal core and has an API to manage it.

Sites with existing credentials need to run database updates so the data can be ported to the new architecture.

Issue #2044303: Fix pass by reference notices Fix pass by reference notices by grndlvl
Issue #1338102: Can't view/use "authorization" edit pages by christianchristensen, dsnopek and h3rj4n: Fixed Can't view/use 'authorization" edit pages.

Small upgrade. Simply linked the main documentation at README.txt.

Dev release for Drupal 8.

OAuth 7.x-3.1-beta1, 2012-2-9
------------------------------
#1431882 by jobeirne, nevets: authorizations listed multiple times.
#1431642 by jobeirne, nevets: consumer deletion fix.

OAuth 7.x-3.0, 2012-2-8
------------------------------
#1378078 by jobeirne: Make Authorizations editable.
#1412226 by jobeirne, sun: allow for deletion of authentications.
#54136 by sun: fix cancel button for authentication delete form.
#1412258 by jobeirne: authentication_options fix

Initial port to Drupal 7.

This is an alpha due to multiple reasons, some of which are:

• It hasn't been tested very much - any help testing it is appreciated.
• It hasn't been verified that all parts are ported and ported correctly.
• The Drupal 6 version this is based on is a beta - and there's no such thing as a beta of a beta.

Breaking changes

Beta 4 includes a major refactoring of the database layer to increase its flexibility and performance. A detailed list of some of the changes can be found in the full release notes.

Noteworthy changes

The Consumer UI submodule has been removed. Modules consuming external OAuth API:s should provide their own mechanisms for maintaining consumer keys and tokens. In the client SHA1 is now the default hashing mechanisms as this is what the OAuth 1.0 specification is using. If you need SHA512 you need to override the default.

A detailed list of changes related to the db refactoring as well as a full list of changes in this beta can be found in the full release notes.

Breaking changes

A breaking change in this release is a move to define API-versions of exported OAuth contexts. This has been supported before by the Chaos tools module that we use for exports, but we hadn't used it. To enable easier API-changes in the future we wanted to make this move prior to releasing a stable version of 6.x-3.0.

Noteworthy changes

• Old nonces will no longer fill the database, it's cleaned on cron thanks to SimmeLj
• Fewer dependencies. We managed to make Inputstream optional for everyone and Chaos tool optional for those only needing the client part of the module

Instructions on how to upgrade current exports as well as a list of all changes can be found in the full release notes.

ATTENTION! This is not a normal update. The old oauth module has been replaced by what was oauth_common and no upgrade path is provided.

Changes since 2.0 (including the changes on 2.01-beta1)

New features:
* OAuth Test module is now available! Its might be used by developers who want to integrate OAuth on their modules.
* Anyone that is studying OAuth thru this module might help on building a online documentation on http://drupal.org/node/296205. Thanks
* The install functions now are present: install the DB tables and remove all traces of the module when uninstalling it
* README.txt now describes the basic features of this module and step-by-step list of HOWTO customize the module to your own needs

Improvements:
* Maintain the same arguments' order for both token request/access and normal web services calling.
* Put "oauth_" prefix on all arguments for tokenRequest and tokenAccess services for consistency
* Faster and more reliable access token creation

Bugs fixed:
* #335980 by vladimir.dolgopolov: Wrong redirect while token_auth on Service Provider
* #330916 by flevour and brmassa: Fatal error: Call to undefined function webservices_error() in modules/oauth/oauth.inc on line 518
* #331470 by flevour: Call to an inexistant function in webservices
* #331289 by flevour: Direct calls to webservices/oauth_* need to include webservices.inc
* #331287 by flevour and brmassa: Token access and token request called using Menu API was not using the function arguments correctly.

Wrongly tagged. use 2.01-beta instead: http://drupal.org/node/333267

OAuth 2.x is a reorganized version of OAuth module. It focus on simplification and code compliance.

Features:
* Minimal memory consumption. Files and functions are only loaded when needed.
* PHP and JavaScript libraries included, so developers might integrate OAuth as a Drupal module or a JS.
* Server and Consumer libraries. No need for separated modules.
* It comes with integration with Web Services module.
* Granular permission