tenebrousedge / copula Goto Github PK

It should probably either return false or throw an exception.

See source here

Right now the behavior of the component is to automatically prevent redirection, it would be kinda difficult for someone to implement their own Authorize method, or to actually use the various pieces of the OauthComponent to alter the default implementation. We should probably have an 'autoRedirect' (boolean) setting to enable or disable this behavior.

If there is no configuration for the plugin in the Controller (= no storage), the function OauthComponent::_afterRequest doesn't return anything.

When doing a callback, nothing is trigger and the tokens are 'lost' somewhere.

It should return the tokens when there is no storage capabilities, to let devs handle the storage of the tokens, there is no other way to get tokens back.

Idea of validating Tokens in validation rules (ex: TokenStoreDb).

Creation of a function that set the callback in the datasource.

What do you think ?

Among other things, this is probably the only way to handle token expiration correctly (i.e. refresh the token and try again).

It should probably take the model and request as arguments, and return the request.