:param request: OAuthlib request. :type request: oauthlib.common.Request :param token_handler: A token handler instance, for

Sign a request Signs an HTTP request with the specified parts. Returns a 3-tuple of the signed request's URI, headers, and body.

Calculates the _base string URI_. The *base string URI* is one of the components that make up the *signature base string*. The ``h

Returns a NotImplementedError for a function that should be implemented. :param fn: name of the function

Decode a query string in x-www-form-urlencoded format into a sequence of two-element tuples. Unlike urlparse.parse_qsl(..., strict_parsing=Tr

Construct a new all-grants-in-one server. :param request_validator: An implementation of oauthlib.oauth2.Re

Create a request token response, with a new request token if valid. :param uri: The full URI of the token request. :param http_method

Check if the uri is over ssl.

Prepare the access token request body. The client makes a request to the token endpoint by adding the following parameters using the

Create introspect valid or invalid response If the authorization server is unable to determine the state of the token without additio

Parse the JSON response body. If the access token request is valid and authorized, the authorization server issues an access token as

Add a list of two-tuples to the uri query components.

Revoke supplied access or refresh token. The authorization server responds with HTTP status code 200 if the token has been revoked s

Extract parameters and return them as a list of 2-tuples. Will successfully extract parameters from urlencoded query strings, dicts, or lists

:param request: OAuthlib request. :type request: oauthlib.common.Request

Construct an initial version of id_token, and let the request_validator sign or encrypt it. The initial version can contain

Add token to the request uri, body or authorization header. The access token type provides the client with the information required t

Prepare the access token request. The client makes a request to the token endpoint by adding the following parameters using the ``application

Gather the request parameters from all the parameter sources. This function is used to extract all the parameters, which are then passed

Parse the JSON token response body into a dict. The authorization server issues an access token and optional refresh token, and constructs th

:param request: OAuthlib request. :type request: oauthlib.common.Request

Create a BearerToken, by default without refresh token. :param request: OAuthlib request. :type request: oauthlib.common.Req

Persist the token with a token type specific method. Currently, only save_bearer_token is supported. :param token: A (Bearer) token

Convert a space separated string to a list of scopes.

Authenticate client through means outside the OAuth 2 spec. Means of authentication is negotiated beforehand and may for example be `

Create an access token response, with a new request token if valid. :param uri: The full URI of the token request. :param http_method

Generates a non-guessable OAuth token OAuth (1 and 2) does not specify the format of tokens except that they should be strings of random char

Convert a list of scopes to a space separated string.

Prepare the authorization grant request URI. The client constructs the request URI by adding the following parameters to the query component

Add the resource owner password and username to the request body. The client makes a request to the token endpoint by adding the foll

Prepare the authorization code request URI The client constructs the request URI by adding the following parameters to the query comp

Create a request token response, with a new request token if valid. :param uri: The full URI of the token request. :param http_method

Create default headers for grant responses.

**HMAC-SHA256** The "HMAC-SHA256" signature method uses the HMAC-SHA256 signature algorithm as defined in `RFC4634`_:: digest =

Test that the request fails similarly on the validation and response endpoint.

Return token or error in json format. :param request: OAuthlib request. :type request: oauthlib.common.Request :param token_h

Validate BearerToken and return userinfo from RequestValidator The UserInfo Endpoint MUST return a content-type header to indicate wh

Extend a query with a list of two-tuples.

Determine if client authentication is required for current request. According to the rfc6749, client authentication is required in the follow

Create PKCE **code_verifier** used in computing **code_challenge**. See `RFC7636 Section 4.1`_ :param length: REQUIRED. The length of

Prepare the implicit grant request URI. The client constructs the request URI by adding the following parameters to the query compone

:param request: OAuthlib request. :type request: oauthlib.common.Request

:param request: OAuthlib request. :type request: oauthlib.common.Request

Calculate the signature for an RSA-based signature method. The ``alg`` is used to calculate the digest over the signature base string. F

Ensure client_id belong to a non-confidential client. A non-confidential client is one that is not required to authenticate through o

Extract hostname and port from URI. Will use default port for HTTP and HTTPS if none is present in the URI.

Parse `expires_in`, `expires_at` fields from params Parse following these rules: - `expires_in` must be either integer, float or None. If a f

Parse the response URI fragment. If the resource owner grants the access request, the authorization server issues an access token and

Add attributes from a token exchange response to self.

**Prepare the Authorization header.** Per `section 3.5.1`_ of the spec. Protocol parameters can be transmitted using the HTTP "Authorization"

Construct the signature base string. The *signature base string* is the value that is calculated and signed by the client. It is also in

Convert a number of different types of objects to unicode.

Validates that supplied client key is a registered and valid client. :param client_key: The client/consumer key. :param request: OAut

Validates that the nonce has not been used before. :param client_key: The client/consumer key. :param timestamp: The ``oauth_timestam

Append OAuth params to an existing set of parameters. Both params and oauth_params is must be lists of 2-tuples. Per `section 3.5.2`_ and `3

Raise if invalid POST request received

Raise on failed client authentication.

Verify a HMAC-SHA1 signature. Per `section 3.4`_ of the spec. .. _`section 3.4`: https://tools.ietf.org/html/rfc5849#section-3.4 To sat

Verify a base64 encoded signature for a RSA-based signature method. The ``alg`` is used to calculate the digest over the signature base stri

Check that the realm is one of a set allowed realms.

Create a JWT Token, using requestvalidator method.

Escape a string in an OAuth-compatible fashion. TODO: verify whether this can in fact be used for OAuth 2

:param request: OAuthlib request. :type request: oauthlib.common.Request

Removes all non oauth parameters from a dict or a list of params.

Generates an OAuth client_id OAuth 2 specify the format of client_id in https://tools.ietf.org/html/rfc6749#appendix-A.

Generate pseudorandom nonce that is unlikely to repeat. Per `section 3.3`_ of the OAuth 1 RFC 5849 spec. Per `section 3.2.1`_ of the MAC Acce

Get seconds since epoch (UTC). Per `section 3.3`_ of the OAuth 1 RFC 5849 spec. Per `section 3.2.1`_ of the MAC Access Authentication spec.

Get the basic OAuth parameters to be used in generating a signature.

Helper function to extract a token from the request header. :param request: OAuthlib request. :type request: oauthlib.common.Request

Its value is the base64url encoding of the left-most half of the hash of the octets of the ASCII representation of the access_token

Calculate the normalized request parameters. The *normalized request parameters* is one of the components that make up the *signature ba

Parse authorization grant response URI into a dict. If the resource owner grants the access request, the authorization server issues an autho