Changes for version 0.07 - 2015-02-11

  • call verify_client before redirecting to login / confirm scopes as there's no point logging a user in, etc, if the client is bad
  • make _verify_access_token return a list as _verify_auth_code so we can report the failure reason in a meaningful way.
  • add example schema and code for using the module with a relational database
  • harden token generation function using Crypt::PRNG random_string

Modules

Easier implementation of an OAuth2 Authorization Server / Resource Server with Mojolicious