f32a3d7cf8
fix(node): Use Node.js v6.14.0 ( #537 )
2018-03-29 15:14:41 +00:00
e8bf2e5cdf
chore(config): add Notes trailing slash to redirect in dev.json ( #536 )
2018-03-29 01:31:19 -04:00
02804a8111
fix(scripts): Fix varname typo in test runner script. ( #535 )
2018-03-26 23:28:55 -04:00
d395e66df7
Merge branch 'master' of github.com:mozilla/fxa-oauth-server
2018-03-27 14:25:29 +11:00
aa68fb9d77
fix(route): make email false by default ( #533 ) r=@rfk
2018-03-20 22:39:21 -04:00
4f913108d5
Release v1.108.0
2018-03-21 13:37:28 +11:00
8181f7f677
feat(amr): Report `amr` and `acr` claims in the id_token. ( #530 ); r=vbudhram
2018-03-20 12:56:18 +11:00
fd85207265
fix(buffer): #527 Migrate deprecated buffer calls ( #528 ) r=@vladikoff
...
Fixes #527
2018-03-14 11:39:36 -04:00
c69fee16d1
Release v1.107.0
2018-03-08 10:26:51 +11:00
78c88ad9a6
chore(deps): Update hapi to v16.6.3 ( #526 )
2018-03-08 10:23:50 +11:00
378360537c
chore(npm): update to npm5 ( #522 ) r=@vbudhram
2018-03-01 10:35:30 -05:00
d813465aef
Release v1.106.0
2018-02-21 12:28:12 +11:00
9f12267618
chore(deps): update deps, fix nsp ( #517 ) r=@philbooth
2018-02-17 09:35:26 -05:00
31adfed98f
Release v1.105.0
2018-02-07 09:50:57 +11:00
f764dc82bf
feat(openid): Allow untrusted reliers to request `openid` scope. ( #516 ), r=@vbudhram
2018-01-29 14:20:27 +00:00
1a470c8535
Release v1.104.0
2018-01-24 14:03:42 +11:00
1c5080782f
feat(auth): Accept client credentials in the Authorization header. ( #514 ); r=philbooth
...
This is required for strict compliance with RFC6749, which mandates
that we MUST support client credentials via this method.
2018-01-24 08:29:14 +11:00
df896d6903
Merge pull request #512 from mozilla/fix-revert-issue-511
...
Revert "fix(config): mark config sentryDsn and mysql password sensitive (#511 )
2018-01-19 15:59:44 -08:00
41bd7c0072
fix(config): reverting 'mark config sentryDsn and mysql password sensitive ( #511 ) r=@vladikof'f
...
This reverts commit d98fbcde73
2018-01-19 15:58:28 -08:00
d98fbcde73
fix(config): mark config sentryDsn and mysql password sensitive ( #511 ) r=@vladikoff
2018-01-11 19:53:20 -05:00
e0de2f3b57
feat(keys): Check lastAuthAt freshness when fetching key data. ( #506 ) r=@vladikoff
2018-01-11 18:30:50 -05:00
4f613d33d4
Release v1.103.0
2018-01-08 20:46:54 -05:00
adc1fc02a5
fix(node): use node 6.12.3 ( #510 ) r=@vladikoff
2018-01-03 20:59:22 -05:00
bc91841f2c
Release v1.100.2
2017-12-04 18:11:50 -05:00
df0ca82ac7
fix(tokens): invalidate refresh tokens on client-token DELETE action ( #508 )
...
Fixes #507
2017-12-04 18:11:32 -05:00
9a95b3c749
Release v1.100.1
2017-11-27 10:28:54 -05:00
a5e6d8f4de
fix(keys): replace scope key TLD ( #505 ) r=@rfk
2017-11-23 22:03:33 -05:00
5d772f656b
revert(keys): Check lastAuthAt freshness when fetching key data
...
This reverts commit 855adee4fe
2017-11-23 17:20:46 -05:00
855adee4fe
feat(keys): Check lastAuthAt freshness when fetching key data. ( #502 ) r=@vladikoff
2017-11-23 14:38:39 -05:00
48ec2a359c
refactor(keys): rename keyMaterial, timestamp to keyRotationSecret, k… ( #500 ) r=@rfk
...
Rename keyMaterial, timestamp to keyRotationSecret, keyRotationTimestamp
2017-11-15 10:37:26 -05:00
6aaa1f9aab
Release v1.100.0
2017-11-15 13:26:53 +11:00
167c97347b
fix(node): use node 6.12.0 ( #501 ) r=@vladikoff
2017-11-14 14:55:22 -05:00
ef34859b79
feat(logs): add sentry support ( #499 ), r=@vbudhram
2017-11-06 08:08:38 -05:00
4ea0661b64
Release v1.99.0
2017-11-03 15:24:21 -04:00
cf1c836b37
fix(pkce): match pkce implementation to specifications ( #498 ) r=rfk
...
Fixes #495
2017-10-31 22:20:36 -04:00
a49b2727b0
fix(travis): run tests with 6 and 8 ( #497 ) r=vladikoff
2017-10-31 21:19:51 -04:00
2a2a8efd68
Release v1.98.1
2017-10-26 13:19:01 -04:00
6eb07cfb6d
chore(docker): Update to node 6.11.5 ( #494 )
2017-10-26 13:17:18 -04:00
9f215e62b1
Release v1.98.0
2017-10-18 13:21:11 +11:00
85af2a2966
chore(dev): add Notes supprot scope in dev ( #492 )
2017-10-10 13:15:21 -04:00
66008c50be
Release v1.97.0
2017-10-03 11:36:22 -04:00
a9152c356f
feat(keys): add key-data docs, move client_id into payload ( #491 ); r=rfk
2017-10-03 09:40:39 +11:00
f892bcba72
feat(scopes): allow https:// scopes ( #490 ); r=rfk
...
Fixes #489
2017-10-03 09:38:18 +11:00
f3fcae5a90
feat(scopes): add key-data and scope support ( #487 ) r=rfk
...
Fixes #483
2017-10-02 11:58:17 -04:00
b6d6c93cf8
fix(deps): update newrelic and request r=@shane-tomlinson
2017-09-28 15:21:25 +01:00
6a4efd1bf7
feat(keys): add keys_jwe support ( #486 ) r=rfk
...
The oauth-server needs the ability to accept an encrypted bundle of key material from content-server during the oauth dance, and provide it to the relier at completion.
Fixes #484
2017-09-21 10:39:09 -04:00
efac7bc852
Release v1.96.0
2017-09-19 19:36:46 -04:00
f5873f9db4
feat(tokens): add support for password change and reset event ( #485 ) r=rfk
...
Fixes #481
Fixes https://bugzilla.mozilla.org/show_bug.cgi?id=1374032
2017-09-19 19:35:17 -04:00
8633fc8e5c
Release v1.95.1
2017-09-14 07:36:47 +10:00
6b2810e0df
chore(deps): Update hapi to latest version ( #482 ) r=vladikoff
2017-09-13 08:54:15 -04:00
Jon Buckley
Vlad Filippov
Ryan Kelly
Ryan Kelly
Deepti
John Morrison
Vijay Budhram
Vijay Budhram