Tom H Anderson

Results 64 comments of Tom H Anderson

DoctrineModule must be upgraded as part of this refurbishment. Currently work is blocked pending laminas-cache 4.0

It's my view that DoctrineModule must come first, so this issue is being discussed here: https://github.com/doctrine/DoctrineModule/issues/834

DoctrineModule PR https://github.com/doctrine/DoctrineModule/pull/829

Putting a fully qualified URL in like http://localhost/erd.png works. So too does https://path.to.deployment/erd.png but `/erd.pdf` does not. I would like the docs generated with relative paths.

I don't understand why they tables aren't as you ask for already, @wshafer . The database design of this repository feels very minimalistic which is contrary to the importance of...

redirect_url should be optional but client_secret is not optional.

You're not going to use the client secret for an implicit grant but you should not have a client without a secret. Maybe you can think of a client_credentials grant...

That used to be the case in zfcampus/zf-oauth2 and they changed it so the secret is required and I think that was the right decision.

@wshafer you're lamenting OAuth1 vs OAuth2 security. OAuth2 requires https. Also, you can and should send the client credentials in the `Authorization: Basic` header. Implicit grant type does not require...