oauth2orize
oauth2orize copied to clipboard
OAuth 2.0 authorization server toolkit for Node.js.
When I stayed at approval dialog, I tried to duplicate the dialog. In the first one, I chose Deny and it was fine. But in the second one, When I...
Is there anyway to port this project to Koa2 middleware ?
I receive this error sporadically: ForbiddenError: Unable to load OAuth 2.0 transaction: 5LDImAAY at SessionStore.load (/opt/node/avi-on/releases/20170221135659/node_modules/oauth2orize/lib/txn/session.js:27:25) at transactionLoader (/opt/node/avi-on/releases/20170221135659/node_modules/oauth2orize/lib/middleware/transactionLoader.js:42:24) at Layer.handle [as handle_request] (/opt/node/avi-on/releases/20170221135659/node_modules/express/lib/router/layer.js:95:5) at next (/opt/node/avi-on/releases/20170221135659/node_modules/express/lib/router/route.js:131:13) at /opt/node/avi-on/releases/20170221135659/node_modules/connect-ensure-login/lib/ensureLoggedIn.js:50:5 at...
Adding token introspection (RFC-7662) would be great! We are using an API gateway with oauth2 introspection, in which the API gateway will query the oauth2 server to query if a...
Hi, is there any way to add custom parameters in oauth2orize.exchange.code ? eg something like: oauth.exchange.code(function(client, code, customparam1,customparam2,redirectURI, done)
Hey, I am working on an implementation which requires that after the user approved a client, the client needs to receive the refresh_token as well next to the access_token. I...
This PR updates the code sample of README.md regarding granting code. The scope is available only in the areq object, not the ares. Here's the return object of the request...
I'm using oauth2orize v1.0.1 with restify. The server is configured to use the token middleware as such: ``` var oauth2orize = require('oauth2orize'); var oauth2Server = oauth2orize.createServer(); server.post('/oauth/token', passport.authenticate('oauth2-client-password', { session:...
According to RFC 6749 (The OAuth 2.0 Authorization Framework): > 5.2. Error Response > > The authorization server responds with an HTTP 400 (Bad Request) > status code (unless specified...