Exception to throw inside :class:`OAuthForm` if any OAuth2 related errors are encountered such as invalid grant type, invalid client, etc.

Exception to throw inside any views defined in :attr:`provider.views`. Any :attr:`OAuthError` thrown will be signalled to the API consumer.

Client authentication form. Required to make sure that we're dealing with a real client. Form is used in :attr:`provider.oauth2.backends` to

Form to create new consumers.

Authenticate a user via access token and client object.

Backend that tries to authenticate a client through HTTP authorization headers as defined in :rfc:`2.3.1`.

Default grant implementation. A grant is a code that can be swapped for an access token. Grants have a limited lifetime as defined by :at

Backend that tries to authenticate a client through request parameters which might be in the request body or URI as defined in :rfc:`2.3.1`.

Default access token implementation. An access token is a time limited token to access a user's resources. Access tokens are outlined :r

Implementation of :class:`provider.views.AccessToken`. .. note:: This implementation does provide all default grant types defined in

:attr:`AccessToken` handles creation and refreshing of access tokens. Implementations must implement a number of methods: * :attr:`get_

Mixin providing common methods required in the OAuth view defined in :attr:`provider.views`.

Check and return an authorization grant.

A form used to ask the resource owner for authorization of a given client.

This form is used to validate the request data that the authorization endpoint receives from clients. Included data is specified in :rfc

Implementation of :class:`provider.views.Authorize`.

View to handle the client authorization as outlined in :rfc:`4`. Implementation must override a set of methods: * :attr:`get_redirect_ur

Base backend used to authenticate clients as defined in :rfc:`1` against our database.

Implementation of :class:`provider.views.Capture`.

As stated in section :rfc:`3.1.2.5` this view captures all the request parameters and redirects to another URL to avoid any leakage of reques

Default client implementation. Expected fields: * :attr:`user` * :attr:`name` * :attr:`url` * :attr:`redirect_url` * :a

Form class that creates shallow error dicts and exists early when a :class:`OAuthValidationError` is raised. The shallow error dict is r

Middleware for using OAuth credentials to authenticate requests If the request user is not authenticated the request is checked for oaut

Validate the password of a user on a password grant request.

Backend that tries to authenticate a client using username, password and client ID. This is only available in specific circumstances: -

Implementation of :class:`provider.views.Redirect`

Redirect the user back to the client with the right query parameters set. This can be either parameters indicating success or parameters indi

Default refresh token implementation. A refresh token can be swapped for a new access token when said token expires. Expected fields:

Checks and returns a refresh token.