freerange/oauth2-provider — pull request #36 by thatothermitch (2012-04-25 19:25:06+00:00)
Title: Client confidentiality

Added support for a the new oauth2-protocol concept of client "confidentiality" -- in a nutshell:

- "Confidential" clients can keep their oauth_secret secret, and therefore CAN be trusted to use the client_credentials flow

- "Public" clients can't necessarily keep their oauth_secret secret, and therefore CAN'T be trusted to use the client_credentials flow (but can still present client credentials when using other flows)

Note that this introduces a new column in the schema. Not an issue for mongoid, but SQL-schemas must be updated. I haven't attempted to address that process in this PR, but would be willing to dig into more later.