Release 4.2.0 by jankapunkt · Pull Request #135 · node-oauth/node-oauth2-server

jankapunkt · 2022-03-18T11:21:09Z

Summary

This is an ongoing PR for the release 4.2.0 which will only include fixes and minor features (non-breaking).

Linked issue(s)

See changelog.md section 4.2.0

#149

Involved parts of the project

See changelog.md section 4.2.0

Added tests?

See changelog.md section 4.2.0

OAuth2 standard

See changelog.md section 4.2.0

Reproduction

…om FStefanni/issue_89_20_649 Supported state in case of denial

Merge pull request #93 from node-oauth/fix-vcharfail-allowemptystate

Co-authored-by: Daniel Reguero <daniel.reguero@hotmail.com> Co-authored-by: Francesco Stefanni <francesco.stefanni@gizeroenergie.it>

Bumps [eslint](https://github.com/eslint/eslint) from 8.2.0 to 8.4.1. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v8.2.0...v8.4.1) --- updated-dependencies: - dependency-name: eslint dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Daniel Reguero <daniel.reguero@hotmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

@jwerre

…ats #55 Merge pull request #108 from node-oauth/oauth-formats thanks to @jwerre

Bumps [sinon](https://github.com/sinonjs/sinon) from 11.1.2 to 12.0.1. - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/master/docs/changelog.md) - [Commits](sinonjs/sinon@v11.1.2...v12.0.1) --- updated-dependencies: - dependency-name: sinon dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [eslint](https://github.com/eslint/eslint) from 8.2.0 to 8.4.1. - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](eslint/eslint@v8.2.0...v8.4.1) --- updated-dependencies: - dependency-name: eslint dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* test example * created db & model factories * added refresh_token grant type test * removed failing test, not implemented feature * add reference to issue * client authentication test * random client credentials in test * replace math.random by crypto.randomBytes

@FStefanni

…ri via model #89 p.4 - support custom validateRedirectUri() - allow to implement model.validateRedirectUri - updated AuthorizeHandler - default conforms with RFC 6819 Section-5.2.3.5 - thanks to @FStefanni and @jorenvandeweyer

* fix(handler): deny access when body.allowed is 'false' * fix(authorization): use simplified if-branch to check for body allow value

@FStefanni

…s#646 Merge pull request #96 from FStefanni/issue_89_18_646 Set WWW-Authenticate header for invalid requests Related: oauthjs#646 Fixes issue #89, point 18. Thanks to @FStefanni

@FStefanni

Merge pull request #92 from FStefanni/issue_89_5_530 Update extension-grants.rst with example thanks to @FStefanni

…on files, ignore package-lock.json in .npmignore to avoid publishing a package with package-lock.json, gitignore package-lock.json We could be prone to a supply-chain-attack when we not carefully review changes in the package-lock.json. urls to packages could be changed to malicious variants. To avoid this, we disable the generation package-lock.json. We should not accept any PRs with package-lock.json.

jankapunkt · 2022-04-15T12:51:38Z

If there are no further PRs to merge into 4.2.0 I will resolve the conflicts and create a new release. Is everybody okay with that? I can also create an rc-release if you first want to test it with your setups.

RefreshTokenGrant: update error messages

bmxpiku · 2022-05-20T10:33:46Z

I am awaiting this :)

Uzlopak · 2022-05-20T14:05:08Z

Just do it

CHANGELOG.md

…e-lock.json

jankapunkt · 2022-06-03T11:44:32Z

🎉 all conflicts resolved, we should be good to go. One needs to approve. I will create a new GitHub release and publish to NPM

package.json

HappyZombies

Code Review Completed

jankapunkt and others added 30 commits October 18, 2021 13:38

ci: ignore test.yml workflow on release-* branches PRs #36

d3b335f

ci: add tests-release.yml workflow to test release-integrity

8c080ff

ci: add release.yml to release a new version to registries

c6459b8

ci(tests): make coverage generate lcov.info file

f4fc33b

ci(tests): make coverage generate lcov.info file as well as html #36

02e0a4d

ci(tests): fix spelling in coverage test script #36

ac7bb86

Updated doc for extension grants

3821ef6

fix(handlers): skip varcheck for state when allowEmptyState

4ca8032

Merge pull request #88 from node-oauth/release-4.1.1

52ee11d

fixes issue 89, point 18, original pr 646

b56afcd

supported custom validateRedirectUri

3df52fd

Supported state in case of denial

91f27f8

feature(): Supported state in case of denialMerge pull request #99 fr…

5824f79

…om FStefanni/issue_89_20_649 Supported state in case of denial

fix(handlers): skip varcheck for state when allowEmptyState #89 #93

aca48ce

Merge pull request #93 from node-oauth/fix-vcharfail-allowemptystate

added test for validateRedirectUri

88ef515

updated documentation

0a86e69

better implementation of validateRedirectUri

98a9d19

Bearer regular expression matching in authenticate handler

8719d83

fixed misssing return statement in doc (#98)

ff9a5d2

Co-authored-by: Daniel Reguero <daniel.reguero@hotmail.com> Co-authored-by: Francesco Stefanni <francesco.stefanni@gizeroenergie.it>

added @node-oauth/formats module, removed is.js tests

4ff1f07

feature(core): extract is.js into standalone package @node-oauth/form…

10fe55d

…ats #55 Merge pull request #108 from node-oauth/oauth-formats thanks to @jwerre

added warning in docs, added extra tests that actually use parameters

3a1e433

Merge branch 'development' into issue_89_4_482

29e081b

fix(handler): deny access when body.allowed is 'false' (#94)

4921a1c

* fix(handler): deny access when body.allowed is 'false' * fix(authorization): use simplified if-branch to check for body allow value

fix(request): set WWW-Authenticate header for invalid requests oauthj…

d1ba63c

…s#646 Merge pull request #96 from FStefanni/issue_89_18_646 Set WWW-Authenticate header for invalid requests Related: oauthjs#646 Fixes issue #89, point 18. Thanks to @FStefanni

jankapunkt and others added 4 commits March 30, 2022 09:18

docs: Update extension-grants.rst with example #92

1269719

Merge pull request #92 from FStefanni/issue_89_5_530 Update extension-grants.rst with example thanks to @FStefanni

use npm i instad of npm ci in workflows

d0a14d7

add yarn.lock to .gitignore and .npmingnore

f0254db

chrisfranko and others added 2 commits April 16, 2022 10:59

RefreshTokenGrant: update error messages

19c8ced

Merge pull request #143 from chrisfranko/development

de3f039

RefreshTokenGrant: update error messages

jankapunkt requested review from HappyZombies, Uzlopak and jorenvandeweyer May 20, 2022 13:29

jankapunkt marked this pull request as ready for review June 2, 2022 14:06

jankapunkt changed the title ~~Draft: Release 4.2.0~~ Release 4.2.0 Jun 2, 2022

jankapunkt added 2 commits June 2, 2022 16:21

update changelog

802d28f

update dev-dependencies

62f3c4d

HappyZombies reviewed Jun 2, 2022

View reviewed changes

CHANGELOG.md Show resolved Hide resolved

jankapunkt added 6 commits June 2, 2022 22:42

fix(docs): re-add accidentally removed changelog for release 4.1.1

9ae7f1e

Merge pull request #141 from Uzlopak/remove-package-lock-json

7050a91

Merge branch 'development' into release-4.2.0

ccf836e

fix(ci): run npm install befire npm audit to provide temporary packag…

7ef6ec0

…e-lock.json

fix(ci): run npm install befire npm audit to provide temporary packag…

98da6bc

…e-lock.json

Merge branch 'master' into release-4.2.0

4ac0430

jankapunkt linked an issue Jun 3, 2022 that may be closed by this pull request

4.2.0 milestone #149

Closed

HappyZombies requested changes Jun 4, 2022

View reviewed changes

package.json Outdated Show resolved Hide resolved

update(build): set package version to 4.2.0

5c3d361

jankapunkt requested a review from HappyZombies June 5, 2022 08:39

HappyZombies approved these changes Jun 5, 2022

View reviewed changes

jankapunkt merged commit e01e841 into master Jun 6, 2022

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Release 4.2.0#135

Release 4.2.0#135
jankapunkt merged 80 commits intomasterfrom
release-4.2.0

jankapunkt commented Mar 18, 2022 •

edited

Loading

Uh oh!

jankapunkt commented Apr 15, 2022

Uh oh!

bmxpiku commented May 20, 2022

Uh oh!

Uzlopak commented May 20, 2022

Uh oh!

Uh oh!

jankapunkt commented Jun 3, 2022

Uh oh!

Uh oh!

HappyZombies left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Uh oh!

Conversation

jankapunkt commented Mar 18, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Linked issue(s)

Involved parts of the project

Added tests?

OAuth2 standard

Reproduction

Uh oh!

jankapunkt commented Apr 15, 2022

Uh oh!

bmxpiku commented May 20, 2022

Uh oh!

Uzlopak commented May 20, 2022

Uh oh!

Uh oh!

jankapunkt commented Jun 3, 2022

Uh oh!

Uh oh!

HappyZombies left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

jankapunkt commented Mar 18, 2022 •

edited

Loading