Giter VIP home page Giter VIP logo

laminas-oauth's Introduction

laminas-oauth

🇷🇺 Русским гражданам

Мы, участники Laminas, родились и живем в разных странах. У многих из нас есть друзья, родственники и коллеги как в России, так и в Украине. Некоторые из нас родились в России. Некоторые из нас живут в России. У некоторых бабушки и дедушки сражались с фашистами во Второй мировой войне. Здесь никто не поддерживает фашизм.

У одного из нас есть украинская родственница, которая спаслась из дома вместе с сыном. Поезд задержался из-за бомбежки на дороге впереди. У нас есть друзья, которые прячутся в бомбоубежищах. Мы с тревогой ждем весточки от них после воздушных налетов, которые беспорядочно наносят удары и попадают по больницам, школам, детским садам и домам. Мы не берем это из каких-либо СМИ. Мы наблюдаем это напрямую.

Вы доверяете нам достаточно, чтоб использовать наши программы, и мы просим вас довериться нам вновь. Мы нуждаемся в помощи. Выходите и протестуйте против этой бесполезной войны. Остановите кровопролитие. Скажите "Нет войне!"

🇺🇸 To Citizens of Russia

We at Laminas come from all over the world. Many of us have friends, family and colleagues in both Russia and Ukraine. Some of us were born in Russia. Some of us currently live in Russia. Some have grandparents who fought Nazis in World War II. Nobody here supports fascism.

One team member has a Ukrainian relative who fled her home with her son. The train was delayed due to bombing on the road ahead. We have friends who are hiding in bomb shelters. We anxiously follow up on them after the air raids, which indiscriminately fire at hospitals, schools, kindergartens and houses. We're not taking this from any media. These are our actual experiences.

You trust us enough to use our software. We ask that you trust us to say the truth on this. We need your help. Go out and protest this unnecessary war. Stop the bloodshed. Say "stop the war!"

This package is considered feature-complete, and is now in security-only maintenance mode, following a decision by the Technical Steering Committee. If you have a security issue, please follow our security reporting guidelines. If you wish to take on the role of maintainer, please nominate yourself

If you are looking for an actively maintained package alternative, we recommend:

Build Status

laminas-oauth provides the ability to authenticate via OAuth1 providers.

laminas-oauth's People

Contributors

akrabat avatar b-durand avatar bakura10 avatar billkarwin avatar boesing avatar dasprid avatar denixport avatar ezimuel avatar ghostwriter avatar gisleburt avatar glo71317 avatar ibiryukov avatar jonathanmaron avatar karyna-tsymbal-atwix avatar kschroeder avatar maks3w avatar marc-mabe avatar michalbundyra avatar mstaessen avatar ocramius avatar pdeszynski avatar powerkiki avatar prolic avatar ralphschindler avatar readme1st avatar thomasweidner avatar weierophinney avatar xmav avatar yousha avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

laminas-oauth's Issues

Psalm integration

Feature Request

Q A
QA yes

Summary

As decided during the Technical-Steering-Committee Meeting on August 3rd, 2020, Laminas wants to implement vimeo/psalm in all packages.

Implementing psalm is quite easy.

Required

  • Create a .psalm.xml.dist in the project root
  • Copy and paste the contents from this psalm.xml.dist
  • Run $ composer require vimeo/psalm
  • Run $ vendor/bin/psalm --set-baseline=psalm-baseline.xml
  • Add a composer script static-analysis with the command psalm --shepherd --stats
  • Add a new line to script: in .travis.yml: - if [[ $TEST_COVERAGE == 'true' ]]; then composer static-analysis ; fi
  • Remove phpstan from the project (phpstan.neon.dist, .travis.yml entry, composer.json require-dev and scripts)
Optional
  • Fix as many psalm errors as possible.

"oauth_nonce" parameter doesn't change beetwen requests but it should

Hello. When I tried to connect with ZendOAuth to Jira, I was always getting the same error, something like oauth_problem=nonce_used. That meant that oauth_nonce value was already used for other request.

I checked out and found that requests to service provider are sending in cycle to find preffered request style - code.

Maybe it is okay, but request params generation happens before cycle (here and here)

So oauth_nonce in request cycle never changes as it should: http://oauth.net/core/1.0a/#nonce

This makes ZendOAuth unusable with some service providers (like Jira) that strictly checks oauth_nonce to be unique for each request.


Originally posted by @binary-data at zendframework/ZendOAuth#29

Can't send requests with the access token.

This might be a documentation issue, but you don't seem to be able to send requests using the access token.

From http://framework.zend.com/manual/2.0/en/modules/zendoauth.introduction.html

$config = array(
    'callbackUrl' => 'http://example.com/callback.php',
    'siteUrl' => 'http://twitter.com/oauth',
    'consumerKey' => 'gg3DsFTW9OU9eWPnbuPzQ',
    'consumerSecret' => 'tFB0fyWLSMf74lkEu9FTyoHXcazOWpbrAjTCCK48A'
);

$client = $token->getHttpClient($configuration);
$client->setUri('http://twitter.com/statuses/update.json');
$client->setMethod(Zend\Http\Client::POST);
$client->setParameterPost('status', $statusMessage);
$response = $client->request();

(It's also worth noting the difference between $config and $configuration)

However \Zend\Http\Client which is returned by ZendOAuth\OAuth::getHttpClient does not have a method called request().

I've also tried send() but this throws the error

Call to a member function connect() on a non-object in /www/vhosts/oauthexample/vendor/zendframework/zend-http/Zend/Http/Client.php on line 1358

Originally posted by @Gisleburt at zendframework/ZendOAuth#21

rsa signing fail with binary_output == true

OAuth server

  • atlassian jira

server response was

  • net.oauth.OAuthException: java.security.SignatureException: Signature length not correct: got 54 but was expecting 256

related config

  • OAuth::REQUEST_SCHEME_HEADER
  • OAuth::POST
  • RSA-SHA1

In ZendOAuth\Signature 'binary_output' is hardcoded as true, but works only when false with the aboves.

(Was hard to debug from outside because of ZendOAuth\Http::startRequestCycle()'s logic


Originally posted by @sipicsg at zendframework/ZendOAuth#27

Add PHP 8.1 support

Can't update to the latest version 2.2

  Problem 1
    - Root composer.json requires laminas/laminas-oauth ^2.2 -> satisfiable by laminas/laminas-oauth[2.2.0, 2.2.x-dev, 2.3.x-dev].
    - laminas/laminas-oauth[2.2.0, ..., 2.3.x-dev] require php ^7.3 || ~8.0.0 -> your php version (8.1.3) does not satisfy that requirement.

Adapter is null when using ZendOAuth with ZendService\Twitter API

I get an error trying to use ZendOAuth with the ZendService\Twitter API. The ZendOAuth\Client class extends the Zend class and has implemented its own getAdapter method. My fix was to defer to the parent getAdapter method if the adapter is null.

My fix is below:

public function getAdapter() {
        $adapter = $this->adapter;

        if (! $adapter) {
            $adapter = parent::getAdapter();
        }

        return $adapter;
    }

It looks like this has been an issue for 6 or 8 months.

I believe this is the same issue:

zendframework/zendframework#5074

I'm using the following versions:

Zend 2.3.1
ZendService\Twitter 2.1.0
ZendOAuth 2.0.2

Thanks


Originally posted by @smallred at zendframework/ZendOAuth#25

fix ZendOAuth\Client\prepareOAuth to statuses/update_with_media

                $oauthHeaderValue = $this->getToken()->toHeader(
                    $this->getRequest()->getUriString(),
                    $this->_config,
                    $this->_getSignableParameters()
                );

to

                $oauthHeaderValue = $this->getToken()->toHeader(
                    $this->getRequest()->getUriString(),
                    $this->_config,
                    (($this->getEncType() == self::ENC_FORMDATA) ? NULL : $this->_getSignableParameters())
                );

The former does not work with statuses/update_with_media
If there is a better solution I hope that reform
Thank you


Originally posted by @jkuwait at zendframework/ZendOAuth#17

Class 'Zend_Oauth_Consumer' not found

Hi,

I am using ZendOAuth to authenticate with an OAuth authentication. I have installed the package and all it dependencies using composer. But when I try to use this code, it can't find the Zend classes.

The code I use is the following

$consumer = new Zend_Oauth_Consumer($this->options);
$token = $consumer->getRequestToken();
echo $token;

I have included the autoloader from composer, All my other packages work fine.

Thank you for your help,
Jerodev


Originally posted by @jerodev at zendframework/ZendOAuth#24

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.