17 Commits

Author SHA1 Message Date
Ben Sturmfels
9bf3bc1944 Remove remaining imports/calls to six not automatically removed by pyupgrade. 2021-03-05 23:42:38 +11:00
Ben Sturmfels
dec47c7102 Apply pyupgrade --py3-plus to remove Python 2 compatibility code. 2021-03-05 23:12:19 +11:00
Christopher Allan Webber
76a8e720e5 Merge branch 'stable' 2015-12-20 09:05:00 -06:00
Jessica Tallon
86ee2d1a0e Fix security issue in OAuth verifier validation 2015-12-19 22:16:00 -06:00
Jessica Tallon
fd703bb4d0 Fix #5353 - Bug in OAuth which referenced "user"
There was a recent change in 0f3bf8d where several names which were
used to refer the actor where renamed to the standard "actor"
property name. There were some places in the OAuth decorator and the
OAuth views where the old names were still referred. This fixes that.
2015-10-17 00:18:32 +00:00
Jessica Tallon
e9bb5879f7 Fix #5344 - OAuth NotImplemented exception
This introduces a migration which adds a dummy Client, RequestToken
and AccessToken. These are used when an invalid request comes in,
instead of bailing early, it needs dummy data to prevent timing
attacks.

This then implements the methods which get the IDs of the dummy
objects. If these are changed in the future a migration which checks
for the previous dummy object should be created and updates them to
reflect the new IDs/tokens.
2015-08-21 17:57:39 +02:00
Jessica Tallon
060a7a7b3d Fix #1057 - unquote redirection URL on successful OAuth authorization 2014-12-08 17:00:33 +00:00
Jessica Tallon
670cdef79c Fix typo in client registration API for logo_uri 2014-10-02 20:34:25 +01:00
Jessica Tallon
ec305bda61 Fix Content-Disposition error for retrieving OAuth request tokens 2014-09-24 11:53:33 +01:00
Christopher Allan Webber
f6bad0eb26 Merge branch 'master' into merge-python3-port
Has some issues, will iteratively fix!

Conflicts:
	mediagoblin/gmg_commands/__init__.py
	mediagoblin/gmg_commands/deletemedia.py
	mediagoblin/gmg_commands/users.py
	mediagoblin/oauth/views.py
	mediagoblin/plugins/api/views.py
	mediagoblin/tests/test_api.py
	mediagoblin/tests/test_edit.py
	mediagoblin/tests/test_oauth1.py
	mediagoblin/tests/test_util.py
	mediagoblin/tools/mail.py
	mediagoblin/webfinger/views.py
	setup.py
2014-09-16 14:01:43 -05:00
Jessica Tallon
9246a6ba89 Tidy up federation code and add tests to cover more of the APIs 2014-08-18 10:51:32 -05:00
Jessica Tallon
32ff6f4dc0 Use oauthlib's safe characters when generating client_key and client_secret 2014-08-18 10:51:15 -05:00
Berker Peksag
20238f54a6 Use isinstance and six.text_type to check types of an object. 2014-07-28 15:26:13 +03:00
Jessica Tallon
24e12cb133 Fix problem in OAuth views 2014-07-22 23:13:16 +01:00
Jessica Tallon
c5eb24b834 Allow crypto.random_string to take optional alphabet param 2014-07-08 21:32:31 +01:00
Rodney Ewing
42dbb26a13 not all JSONEncoded fields should be mutable dicts 2013-09-19 08:12:11 -07:00
xray7224
005181b166 Renames OAuth1 code to federation 2013-07-22 17:06:00 +01:00