Custom Query (1173 matches)
Results (229 - 231 of 1173)
| Ticket | Resolution | Summary | Owner | Reporter |
|---|---|---|---|---|
| #240 | FIXED | Provide facility for configuring application-required middleware | ||
| Description |
Some things, like CSRF protection (`#361 </issues/361>`_), benefit from the ability to uniformly call helpers before and after a request is processed by the view. In the case of CSRF, we want to confirm that the token matches before processing the view, and make sure the token is set before delivering the response. Unlike WSGI middleware, this sort of wrapping is an integral part of the application. |
|||
| #548 | fixed | Add support for token refresh to the OAuth plugin | ||
| Description |
The OAuth plugin currently does not support token refresh, as described in the OAuth specification. This is needed to allow Android clients (among others) to refresh their tokens as they expire. It appears there was some planning for this, as a refresh_token field exists in the OAuthToken model, but it is currently unpopulated. This work may overlap with work on #517. |
|||
| #549 | fixed | Allow users to revoke an OAuth access grant | ||
| Description |
Users can currently authorize an application and view the applications they've authorized, but can not revoke access. We should add support for this. |
|||
Note:
See TracQuery
for help on using queries.
