- Support multiple
redirect_uri
#10
- Rename all athorizedClients to authorizedClients (please update your users DB too)
- Allow
refresh_token
as a Grant Type - Transform any requests to
/oauth/token
that isPOST
and isn'tapplication/x-www-form-urlencoded
, merging the body and the query strings. See pull request #5 for more details.
- Redirect user to
/oauth/error/404
instead of/oauth/404
- Redirect user to
/oauth/error/invalid_redirect_uri
if uri does not match
- Redirect user to
/oauth/404
if client does not exists or is inactive
- Return only clients with
active: true
- Only process errors for oauth routes
- Allow pass collection object instead collection name
- Added more debug logs
- Initial implementation