1. New Feature SECOAUTH-205
    Implicit grant should be able to ask for user approval
  2. Bug SECOAUTH-202
    Password encoders cause problems with untrusted clients.
  3. Bug SECOAUTH-201
    XSD package in JAR is oauth not oauth2
  4. Bug SECOAUTH-199
    The schema spring-security-oauth2-1.0.xsd cause validation error in Eclipse
  5. New Feature SECOAUTH-197
    Add a new authentication scheme "none" for protected resources that don't need client authentication
  6. New Feature SECOAUTH-196
    Add access denied handler similar to the authentication entry point used in sparklr2
  7. Bug SECOAUTH-195
    InMemoryTokenStore can be internally inconsistent if user account is deleted and re-created
  8. Bug SECOAUTH-194
    Invalid Redirect URI is detected but still redirected anyway
  9. Bug SECOAUTH-191
    AuthorizationEndpoint allows bypassing user approval page for authorization code grant_type
  10. New Feature SECOAUTH-188
    Issue authorization code from AuthorizationEndpoint directly if all required parameters are present in request
  11. New Feature SECOAUTH-186
    Add convenience method for determining if an OAuth2 authentication is on behalf of a user or a client app
  12. Bug SECOAUTH-184
    Implicit token provider should always send client_id as request parameter
  13. Refactoring SECOAUTH-183
    Access and refresh Token value don't need to be final
  14. Improvement SECOAUTH-182
    Remove client secret from all APIs that don't strictly need it
  15. Improvement SECOAUTH-179
    Improve extendability of RandomValueTokenServices by keeping storage separate from token creation
  16. Task SECOAUTH-178
    Improve unit tests for OAuth2Exception and OAuth2AccessToken HttpMessageConverter's
  17. Task SECOAUTH-177
    Switch to Mockito
  18. Task SECOAUTH-176
    InvalidClientException should be 401?
  19. Bug SECOAUTH-175
    ClientCredentialsTokenEndpointFilter Returns HTML error responses
  20. Improvement SECOAUTH-174
    Change samples html form method from POST to post
  21. New Feature SECOAUTH-172
    Use regular authentication filter for client credentials checking in OAuth endpoints
  22. New Feature SECOAUTH-171
    Add password-encoder to XML namespace for <authorization-server/>
  23. Task SECOAUTH-170
    Upgrade to Spring Security 3.1
  24. Bug SECOAUTH-169
    require-authenticated not part of the client namespace in the latest xsd
  25. New Feature SECOAUTH-168
    Check redirect URI and compare with registered URI (a la Facebook)
  26. Bug SECOAUTH-167
    Token Service default in <authorization-server/> incorrect
  27. New Feature SECOAUTH-165
    Make access token expiry a function of client, not global for the auth server
  28. Improvement SECOAUTH-164
    AccessTokens are cached in 2 places on client - consolidate to 1
  29. Refactoring SECOAUTH-156
    Remove ClientAuthenticationScheme infavour of a more generic AuthenticationScheme enum
  30. New Feature SECOAUTH-152
    OAuth2ErrorHandler could delegate to a user-provided ResponseErrorHandler
  31. Improvement SECOAUTH-151
    Client context should not need local webapp user auth token if client credentials grant type is in use
  32. New Feature SECOAUTH-129
    Remember authorization decisions for individual client/user combinations
  33. Task SECOAUTH-106
    Deal with compiler warnings
  34. Bug SECOAUTH-104
    HttpSessionAccessTokenCache does not create a session
  35. New Feature SECOAUTH-99
    Add expression handlers for <http/> configuration
  36. New Feature SECOAUTH-93
    Add scope to WWW-Authenticate header in OAuth2ProtectedResourceFilter
  37. New Feature SECOAUTH-52
    Support OAuth2 Alternate Formatting of Protocol Responses
Refresh results