New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

auth-server

Package Overview
Dependencies
Maintainers
1
Versions
10
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

auth-server - npm Package Compare versions

Comparing version 2.2.3 to 2.3.0

13

package.json

@@ -9,10 +9,10 @@ {

],
"version": "2.2.3",
"homepage": "https://github.com/wpreul/oauth",
"version": "2.3.0",
"homepage": "https://github.com/geek/oauth",
"repository": {
"type": "git",
"url": "git://github.com/wpreul/oauth.git"
"url": "git://github.com/geek/oauth.git"
},
"bugs": {
"url": "https://github.com/wpreul/oauth/issues"
"url": "https://github.com/geek/oauth/issues"
},

@@ -22,3 +22,4 @@ "main": "index",

"devDependencies": {
"lab": "0.1.x"
"code": "1.x.x",
"lab": "5.x.x"
},

@@ -35,5 +36,5 @@ "optionalDependencies": {},

"type": "MIT +no-false-attribs",
"url": "https://github.com/wpreul/OAuth/blob/master/LICENCE"
"url": "https://github.com/geek/OAuth/blob/master/LICENCE"
}
]
}
# OAuth for Node
=====
[![Build Status](https://travis-ci.org/wpreul/OAuth.png)](https://travis-ci.org/wpreul/OAuth)
[![Build Status](https://travis-ci.org/geek/OAuth.png)](https://travis-ci.org/geek/OAuth)

@@ -72,2 +72,2 @@ ## Contributors

4. So there is an odd amount of extra work involved in for a confidential client using the authorization_code grant type. After a user authorizes a client to operate on their behalf the response is either a token or a code. If it is a token then the client doesn't get a refresh token. If it is a code then the client must make an extra request to get a token, but will also get a refresh token. I have decided to provide a third option, which is surprisingly lacking from the spec. This third option is to pass in response_type=code_and_token. When the client does this it will get a token back that it can immediately use while at the same time making a request to the token endpoint to get a more permanent token with a refresh token. I hope you will see this extra option as an improvement over the spec.
4. So there is an odd amount of extra work involved in for a confidential client using the authorization_code grant type. After a user authorizes a client to operate on their behalf the response is either a token or a code. If it is a token then the client doesn't get a refresh token. If it is a code then the client must make an extra request to get a token, but will also get a refresh token. I have decided to provide a third option, which is surprisingly lacking from the spec. This third option is to pass in response_type=code_and_token. When the client does this it will get a token back that it can immediately use while at the same time making a request to the token endpoint to get a more permanent token with a refresh token. I hope you will see this extra option as an improvement over the spec.
// Load modules
var Code = require('code');
var Lab = require('lab');

@@ -14,7 +15,6 @@ var AuthServer = require('../lib/');

var expect = Lab.expect;
var before = Lab.before;
var after = Lab.after;
var describe = Lab.experiment;
var it = Lab.test;
var lab = exports.lab = Lab.script();
var describe = lab.describe;
var it = lab.it;
var expect = Code.expect;

@@ -21,0 +21,0 @@

// Load modules
var Code = require('code');
var Lab = require('lab');

@@ -14,7 +15,6 @@ var Context = require('../lib/context');

var expect = Lab.expect;
var before = Lab.before;
var after = Lab.after;
var describe = Lab.experiment;
var it = Lab.test;
var lab = exports.lab = Lab.script();
var describe = lab.describe;
var it = lab.it;
var expect = Code.expect;

@@ -21,0 +21,0 @@

// Load modules
var Code = require('code');
var Lab = require('lab');

@@ -14,7 +15,6 @@ var Util = require('../lib/util');

var expect = Lab.expect;
var before = Lab.before;
var after = Lab.after;
var describe = Lab.experiment;
var it = Lab.test;
var lab = exports.lab = Lab.script();
var describe = lab.describe;
var it = lab.it;
var expect = Code.expect;

@@ -21,0 +21,0 @@

Sorry, the diff of this file is not supported yet

Sorry, the diff of this file is not supported yet

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc