| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2015-02-09 | Merge master | Tom Christie | |
| 2015-02-04 | Prefetching the user object when getting the token in TokenAuthentication. | Ofir Ovadia | |
| Since the user object is fetched 4 lines after getting Token from the database, this removes a DB query for each token-authenticated request. | |||
| 2015-02-04 | Minor authentication message improvement. | Tom Christie | |
| 2015-01-07 | prefer single quotes in source and double quotes in user visible strings; ↵ | Craig Blaszczyk | |
| add some missing full stops to user visible strings | |||
| 2015-01-07 | use double quotes for user visible strings; end user visible strings in full ↵ | Craig Blaszczyk | |
| stops; add some missing translation tags | |||
| 2014-12-05 | Removed unused imports, pep8 fixes, typo fixes | Tymur Maryokhin | |
| 2014-11-28 | Merge branch 'version-3.1' into oauth_as_package | José Padilla | |
| Conflicts: requirements-test.txt rest_framework/compat.py tests/settings.py tox.ini | |||
| 2014-09-23 | Changed return status for CSRF failures to HTTP 403 | Danilo Bargen | |
| By default, Django returns "HTTP 403 Forbidden" responses when CSRF validation failed[1]. CSRF is a case of authorization, not of authentication. Therefore `PermissionDenied` should be raised instead of `AuthenticationFailed`. [1] https://docs.djangoproject.com/en/dev/ref/contrib/csrf/#rejected-requests | |||
| 2014-09-05 | Moved OAuth support out of DRF and into a separate package, per #1767 | Jharrod LaFon | |
| 2014-09-03 | Using user.get_username() instead of user.username. | dpanesso | |
| This solves an error when using a auth model that does not have a username field. | |||
| 2014-08-19 | Code linting and added runtests.py | Tom Christie | |
| 2014-08-19 | Merge master | Tom Christie | |
| 2014-07-25 | Sending "Bearer" and "Bearer " resulted in a 500. | Ron Cohen | |
| 2014-04-13 | Merge remote-tracking branch 'origin/master' into 2.4.0 | Xavier Ordoquy | |
| Conflicts: .travis.yml docs/api-guide/fields.md docs/api-guide/routers.md docs/topics/release-notes.md rest_framework/authentication.py rest_framework/serializers.py rest_framework/templatetags/rest_framework.py rest_framework/tests/test_authentication.py rest_framework/tests/test_filters.py rest_framework/tests/test_hyperlinkedserializers.py rest_framework/tests/test_serializer.py rest_framework/tests/test_testing.py rest_framework/utils/encoders.py tox.ini | |||
| 2014-03-19 | authentication: allow all transport modes of access token in ↵ | Benjamin Dauvergne | |
| OAuth2Authentication RFC6750 describe three transport modes for access tokens when accessing a protected resource: - Auhthorization header with the Bearer authentication type - form-encoded body parameter - URI query parameter This patch add support for last two transport modes. | |||
| 2014-03-05 | don't implicitly import provider.oauth2 | Eric Buehl | |
| 2013-12-23 | Merge branch 'bennbollay-patch-1' into 2.4.0 | Tom Christie | |
| Conflicts: .travis.yml docs/api-guide/routers.md rest_framework/compat.py tox.ini | |||
| 2013-12-13 | Compat fixes for django-oauth-plus versions 2.0-2.2.1 | Tom Christie | |
| 2013-11-14 | pass oauth_timestamp to oauth_provider | Philip Forget | |
| 2013-09-25 | Drop 1.3 support | Tom Christie | |
| 2013-06-29 | Simplify APIClient implementation | Tom Christie | |
| 2013-06-29 | Refactor SessionAuthentication slightly | Tom Christie | |
| 2013-06-26 | Use timezone aware datetimes with oauth2 provider, when supported. Closes #947. | Tom Christie | |
| 2013-06-05 | Fix serialization exception when using non-existent consumer | Alex Burgel | |
| 2013-04-25 | Cleanup docstrings | Tom Christie | |
| 2013-04-03 | Fix the fact that InvalidConsumerError and InvalidTokenError wasn't imported ↵ | Atle Frenvik Sveen | |
| correctly from oauth_provider | |||
| 2013-04-03 | Fix bug with inactive user accessing OAuth | Tom Christie | |
| 2013-03-27 | Complete remove of client checks from oauth2 | Fernando Rocha | |
| Signed-off-by: Fernando Rocha <fernandogrd@gmail.com> | |||
| 2013-03-27 | client credentials should be optional (fix #759) | Fernando Rocha | |
| client credentials should only be required on token request Signed-off-by: Fernando Rocha <fernandogrd@gmail.com> | |||
| 2013-03-22 | If oauth is not attempted don't throw an error. Fixes #748. | Tom Christie | |
| 2013-03-08 | Fixes for auth header checking. | Tom Christie | |
| 2013-03-08 | More bits of cleanup | Tom Christie | |
| 2013-03-07 | Merge OAuth2 work. | Tom Christie | |
| 2013-03-07 | Clean ups. | Tom Christie | |
| 2013-03-07 | Fix Py3k syntax errors | Tom Christie | |
| 2013-03-07 | Merge & clean OAuth support | Tom Christie | |
| 2013-03-02 | Properly fail to wrong Authorization token type | Pierre Dulac | |
| 2013-03-01 | Clean up some print and comments | Pierre Dulac | |
| 2013-03-01 | Improve the `django-oauth2-provider` import block | Pierre Dulac | |
| to avoid naming collision with `oauth2` used for OAuth 1 | |||
| 2013-03-01 | Add the OAuth2Authentication class | Pierre Dulac | |
| 2013-02-26 | Move oauth2 and django-oauth-plus imports to compat and fix some minor issues | swistakm | |
| - alias oauth2 as oauth - remove rouge print - remove docstring markups - OAuthAuthentication.authenticate() now returns (user, token) two-tuple on success - don't set request.user because it's already set | |||
| 2013-02-25 | add OAuthAuthentication class | swistakm | |
| 2013-02-04 | Cleanup imports | Tom Christie | |
| Mostly adding `from __future__ import unicode_literals` everywhere. | |||
| 2013-02-01 | 3.2, 3.3 compat | Tom Christie | |
| 2013-02-01 | Merge branch 'p3k' of https://github.com/linovia/django-rest-framework into ↵ | Tom Christie | |
| working Conflicts: rest_framework/authentication.py rest_framework/relations.py rest_framework/serializers.py rest_framework/settings.py rest_framework/tests/authentication.py rest_framework/tests/genericrelations.py rest_framework/tests/generics.py rest_framework/tests/relations_hyperlink.py rest_framework/tests/relations_nested.py rest_framework/tests/relations_pk.py rest_framework/tests/serializer.py | |||
| 2013-01-21 | WWW-Authenticate responses | Tom Christie | |
| 2013-01-07 | Introduced HTTP_HEADER_ENCODING. | Xavier Ordoquy | |
| 2013-01-03 | Also use the compat module in that file. | Xavier Ordoquy | |
| 2012-11-23 | Default encoding should probably be latin-1 as some RFC seems to imply it. | Xavier Ordoquy | |
| 2012-11-22 | 6 first tests passes under python 3.2 | Xavier Ordoquy | |
