oauth2 icon indicating copy to clipboard operation
oauth2 copied to clipboard

OAuth 2.0 server library for the Go programming language.

Results 111 oauth2 issues
Sort by recently updated
recently updated
newest added
trafficstars

https://tools.ietf.org/html/rfc6749#section-4.1.1 States that the redirect_uri is __OPTIONAL__ The server returns an error when `redirect_uri` is omitted. https://github.com/go-oauth2/oauth2/blob/master/server/server.go#L152 ```go redirectURI := r.FormValue("redirect_uri") clientID := r.FormValue("client_id") if !(r.Method == "GET" || r.Method...

There are at least 2 distinct cases - when we did not configure the user authorization handler, and when we did. For the first case, if we use the server...

Gjson, a dependency of this package has a major security vulnerability which can be avoided if we update the version to anything above 1.6.5. In this pull request I have...

I noticed that you revoked the support for fasthttp. I'm curious what the reasoning behind that was and if there are any plans to include it in a future release?...

go-oauth2/oauth2/[email protected]/server/server.go:243:6: no new variables on left side of := assignment happened at 243 line also 215 line

Team: When calling refresh_Token does not use the following code: if cliPass, ok := cli.(oauth2.ClientPasswordVerifier); ok { if !cliPass.VerifyPassword(tgr.ClientSecret) { return nil, errors.ErrInvalidClient } }

Building from the latest master branch produces an error: ``` /go/src/github.com/go-oauth2/oauth2/server/server.go:243:6: no new variables on left side of := ``` The failing build command on the build pipeline: ``` go...

The https://tools.ietf.org/html/rfc6749#section-3.1 talks: > The authorization server MUST support the use of the HTTP "GET method [RFC2616] for the authorization endpoint and MAY support the use of the "POST" method...

I think this oauth2.0 server library cannot support multiple endpoints Is it right?. oauth2.v3/models/client.go // Client client model type Client struct { ID string Secret string Domain string UserID string...

I'm implementing 2 backends, one of them is for authentication and the other one contains business logic. A client is going to login with their username and pass to the...