/ 
Net-OAuth-0.33

Changes for version 0.33

  • Security
    • Restrict the verification algorithm to those specified in the allowed_signature_methods, which is now required. THIS IS A BREAKING CHANGE.
      • See https://github.com/vurtdev/Net-OAuth/security/advisories/GHSA-c8rm-g5cm-4pf5 (CVE-2026-72889) for more information.
    • HMAC_SHA1 and HMAC_SHA256 signature keys cannot be blank.
    • HMAC_SHA1, HMAC_SHA256 and PLAINTEXT signature verification now use constant-time comparison (CVE-2026-75589).
  • Documentation
    • Updated the GitHub repository location, which moved before the version 0.32 release. (The former location does redirect to the new location.)
    • Removed CONTRIBUTING.md due to changes in the AI policy.
    • Updated copyright year.

Documentation

SECURITY.md

Modules

Net::OAuth
OAuth 1.0 for Perl
Net::OAuth::AccessToken
OAuth Access Token
Net::OAuth::AccessTokenRequest
An OAuth protocol request for an Access Token
Net::OAuth::AccessTokenResponse
An OAuth protocol response for an Access Token
Net::OAuth::Client
OAuth 1.0A Client
Net::OAuth::ConsumerRequest
An OAuth Consumer Request
Net::OAuth::Message
base class for OAuth messages
Net::OAuth::ProtectedResourceRequest
An OAuth protocol request for a Protected Resource
Net::OAuth::Request
base class for OAuth requests
Net::OAuth::RequestTokenRequest
An OAuth protocol request for a Request Token
Net::OAuth::RequestTokenResponse
An OAuth protocol response for an Request Token
Net::OAuth::Response
base class for OAuth responses
Net::OAuth::SignatureMethod
a base class for signature methods
Net::OAuth::SignatureMethod::HMAC_SHA1
HMAC_SHA1 Signature Method for OAuth protocol
Net::OAuth::SignatureMethod::HMAC_SHA256
HMAC_SHA256 Signature Method for OAuth protocol
Net::OAuth::SignatureMethod::PLAINTEXT
PLAINTEXT Signature Method for OAuth protocol
Net::OAuth::SignatureMethod::RSA_SHA1
RSA_SHA1 Signature Method for OAuth protocol
Net::OAuth::UserAuthRequest
request for OAuth User Authentication
Net::OAuth::UserAuthResponse
An OAuth protocol response for an Access Token
Net::OAuth::V1_0A::AccessTokenRequest
An OAuth protocol request for an Access Token
Net::OAuth::V1_0A::RequestTokenRequest
An OAuth protocol request for a Request Token
Net::OAuth::V1_0A::RequestTokenResponse
An OAuth protocol response for an Request Token
Net::OAuth::V1_0A::UserAuthResponse
An OAuth protocol response for an Access Token
Net::OAuth::XauthAccessTokenRequest
xAuth extension
Net::OAuth::YahooAccessTokenRefreshRequest
Yahoo OAuth Extension

Other files