Skip to content

Conversation

marnanel
Copy link
Contributor

This adds support for the "urn:ietf:wg:oauth:2.0:oob" and "urn:ietf:wg:oauth:2.0:oob:auto" URNs, as discussed in issue #235 .

The dict returned by "urn:ietf:wg:oauth:2.0:oob:auto" needs work because it's currently missing several members which are inspected by the standard client. I'm submitting this PR now to check whether I'm barking up the wrong tree further up, so to speak.

marnanel and others added 2 commits December 30, 2019 23:46
…ort for

urn:ietf:wg:oauth:2.0:oob and urn:ietf:wg:oauth:2.0:oob:auto
redirect URLs.
@coveralls
Copy link

coveralls commented Dec 31, 2019

Pull Request Test Coverage Report for Build 1248

  • 15 of 15 (100.0%) changed or added relevant lines in 1 file are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage increased (+0.05%) to 94.776%

Totals Coverage Status
Change from base Build 1235: 0.05%
Covered Lines: 1270
Relevant Lines: 1340

💛 - Coveralls

@marnanel marnanel changed the title First draft of a possible fix for issue #235 (urn:ietf:wg:oauth:2.0:oob support) Fix for issue #235 (urn:ietf:wg:oauth:2.0:oob support) Jan 6, 2020
@marnanel marnanel marked this pull request as ready for review January 6, 2020 19:16
Copy link
Contributor

@auvipy auvipy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

code coverage is decreasing as per matrix

@marnanel
Copy link
Contributor Author

Coverage is now increasing.

@auvipy auvipy merged commit b8f4d78 into django-oauth:master Jan 23, 2020
@marnanel marnanel deleted the issue235 branch February 9, 2020 23:40
@n2ygk
Copy link
Contributor

n2ygk commented Feb 29, 2020

In the process of trying to document what's in the next release (#785) I googled this feature and see discussion of it being a non-standard google-only deprecated practice that is replaced by RFC 8252 which offers a few mechanisms to get the same result for a command-line app.

Consider deprecating this in a future release. I'll put a warning in the Changelog.

@andersk
Copy link

andersk commented Apr 8, 2021

@n2ygk Is the protocol itself deprecated, or merely Google’s usage of the Windows title bar as the communication channel? The django-oauth-toolkit implementation does not use the title bar.

It still seems like a really useful mechanism for native applications that can’t (due to privilege separation) or won’t (due to portability concerns) do things like register a URI protocol handler or open a firewall port.

Also, it’s not Google-only:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants