BSD Ports

net/p5-Net-OAuth 0.33 NetBSD

Perl5 extension for OAuth protocol support

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
cdc9eac75e
License
gnu-gpl-v2 OR artistic
Categories
net, perl5
Package size
23.5 KiB, 139.4 KiB installed

Description

OAuth is

"An open protocol to allow secure API authentication in a simple and standard method from desktop and web applications."

In practical terms, OAuth is a mechanism for a Consumer to request protected resources from a Service Provider on behalf of a user.

Net::OAuth provides:

\* classes that encapsulate OAuth messages (requests and responses)
\* message signing
\* message serialization and parsing.
\* 2-legged requests (aka. tokenless requests, aka. consumer requests)

Net::OAuth does not provide:

\* Consumer or Service Provider encapsulation
\* token/nonce/key storage/management

Please refer to the OAuth spec: http://oauth.net/documentation/spec

In the other systems

SystemPortVersion
NetBSDnet/p5-Net-OAuth0.33
FreeBSDnet/p5-Net-OAuth0.33
OpenBSDnet/p5-Net-OAuth0.33
DragonFlynet/p5-Net-OAuth0.30
HardenedBSDnet/p5-Net-OAuth0.33
GhostBSDnet/p5-Net-OAuth0.33

Install

Binary package:

pkgin install p5-Net-OAuth

From pkgsrc:

cd /usr/pkgsrc/net/p5-Net-OAuth && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_640.33
NetBSD 10.1 aarch640.28nb11
SmartOS / illumos x86_640.33
macOS 15 arm640.33

Dependencies

Run dependencies 7

Commit history 3

DateCommitCreditsLog message
cdc9eac75e wiz p5-Net-OAuth: update to 0.33.
0.33 Mon 17 Aug 23:14:01 BST 2026 [Security] - Restrict the verification algorithm to those specified in the allowed_signature_methods, which is now required. THIS IS A BREAKING CHANGE. See https://github.com/vurtdev/Net-OAuth/security/advisories/GHSA-c8rm-g5cm-4pf5 (CVE-2026-72889) for more information. - HMAC_SHA1 and HMAC_SHA256 signature keys cannot be blank. - HMAC_SHA1, HMAC_SHA256 and PLAINTEXT signature verification now use constant-time comparison (CVE-2026-75589). [Documentation] - Updated the GitHub repository location, which moved before the version 0.32 release. (The former location does redirect to the new location.) - Removed CONTRIBUTING.md due to changes in the AI policy. …
2629051f5e wiz p5-Net-OAuth: update to 0.32.
0.32 Sun 16 Aug 00:51:04 BST 2026 [Security] - The Net::OAuth smart_require function no longer memoizes failures, which allowed attackers to exhaust memory with requests for invalid signature methods. CVE-2026-72888 - Net::OAuth::Client no longer allows silent downgrades from OAuth 1.0a to 1.0 when the remote provider drops the oauth_verifier. The behavior can be re-enabled with the allow_v1a_downgrade option. CVE-2026-72887 [Bug Fixes] - RSA-SHA1 now pins PKCS#1 v1.5 padding and the SHA-1 hash rather than inheriting Crypt::OpenSSL::RSA's defaults, which have drifted (SHA-256 in 0.29_01, RSA-PSS in 0.35). Against 0.35 and later this …
618415630a wiz *: recursive bump for perl5 5.44.0