Added Kohana v3.0.9

includes/kohana/modules/oauth/README.md

@@ -0,0 +1,5 @@
+# OAuth for Kohana
+
+An implementation of the [OAuth](http://oauth.net/) protocol.
+
+*Does not provide server capabilities!*

includes/kohana/modules/oauth/classes/kohana/oauth.php

@@ -0,0 +1,217 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Library
+ *
+ * @package    Kohana/OAuth
+ * @category    Base
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+abstract class Kohana_OAuth {
+
+	/**
+	 * @var  string  OAuth complaince version
+	 */
+	public static $version = '1.0';
+
+	/**
+	 * RFC3986 compatible version of urlencode. Passing an array will encode
+	 * all of the values in the array. Array keys will not be encoded.
+	 *
+	 *     $input = OAuth::urlencode($input);
+	 *
+	 * Multi-dimensional arrays are not allowed!
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec 5.1](http://oauth.net/core/1.0/#rfc.section.5.1).
+	 *
+	 * @param   mixed   input string or array
+	 * @return  mixed
+	 */
+	public static function urlencode($input)
+	{
+		if (is_array($input))
+		{
+			// Encode the values of the array
+			return array_map(array('OAuth', 'urlencode'), $input);
+		}
+
+		// Encode the input
+		$input = rawurlencode($input);
+
+		if (version_compare(PHP_VERSION, '<', '5.3'))
+		{
+			// rawurlencode() is RFC3986 compliant in PHP 5.3
+			// the only difference is the encoding of tilde
+			$input = str_replace('%7E', '~', $input);
+		}
+
+		return $input;
+	}
+
+	/**
+	 * RFC3986 complaint version of urldecode. Passing an array will decode
+	 * all of the values in the array. Array keys will not be encoded.
+	 *
+	 *     $input = OAuth::urldecode($input);
+	 *
+	 * Multi-dimensional arrays are not allowed!
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec 5.1](http://oauth.net/core/1.0/#rfc.section.5.1).
+	 *
+	 * @param   mixed  input string or array
+	 * @return  mixed
+	 */
+	public static function urldecode($input)
+	{
+		if (is_array($input))
+		{
+			// Decode the values of the array
+			return array_map(array('OAuth', 'urldecode'), $input);
+		}
+
+		// Decode the input
+		return rawurldecode($input);
+	}
+
+	/**
+	 * Normalize all request parameters into a string.
+	 *
+	 *     $query = OAuth::normalize_params($params);
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec 9.1.1](http://oauth.net/core/1.0/#rfc.section.9.1.1).
+	 *
+	 * @param   array   request parameters
+	 * @return  string
+	 * @uses    OAuth::urlencode
+	 */
+	public static function normalize_params(array $params = NULL)
+	{
+		if ( ! $params)
+		{
+			// Nothing to do
+			return '';
+		}
+
+		// Encode the parameter keys and values
+		$keys   = OAuth::urlencode(array_keys($params));
+		$values = OAuth::urlencode(array_values($params));
+
+		// Recombine the parameters
+		$params = array_combine($keys, $values);
+
+		// OAuth Spec 9.1.1 (1)
+		// "Parameters are sorted by name, using lexicographical byte value ordering."
+		uksort($params, 'strcmp');
+
+		// Create a new query string
+		$query = array();
+
+		foreach ($params as $name => $value)
+		{
+			if (is_array($value))
+			{
+				// OAuth Spec 9.1.1 (1)
+				// "If two or more parameters share the same name, they are sorted by their value."
+				$value = natsort($value);
+
+				foreach ($value as $duplicate)
+				{
+					$query[] = $name.'='.$duplicate;
+				}
+			}
+			else
+			{
+				$query[] = $name.'='.$value;
+			}
+		}
+
+		return implode('&', $query);
+	}
+
+	/**
+	 * Parse the query string out of the URL and return it as parameters.
+	 * All GET parameters must be removed from the request URL when building
+	 * the base string and added to the request parameters.
+	 *
+	 *     // parsed parameters: array('oauth_key' => 'abcdef123456789')
+	 *     list($url, $params) = OAuth::parse_url('http://example.com/oauth/access?oauth_key=abcdef123456789');
+	 *
+	 * [!!] This implements [OAuth Spec 9.1.1](http://oauth.net/core/1.0/#rfc.section.9.1.1).
+	 *
+	 * @param   string  URL to parse
+	 * @return  array   (clean_url, params)
+	 * @uses    OAuth::parse_params
+	 */
+	public static function parse_url($url)
+	{
+		if ($query = parse_url($url, PHP_URL_QUERY))
+		{
+			// Remove the query string from the URL
+			list($url) = explode('?', $url, 2);
+
+			// Parse the query string as request parameters
+			$params = OAuth::parse_params($query);
+		}
+		else
+		{
+			// No parameters are present
+			$params = array();
+		}
+
+		return array($url, $params);
+	}
+
+	/**
+	 * Parse the parameters in a string and return an array. Duplicates are
+	 * converted into indexed arrays.
+	 *
+	 *     // Parsed: array('a' => '1', 'b' => '2', 'c' => '3')
+	 *     $params = OAuth::parse_params('a=1,b=2,c=3');
+	 *
+	 *     // Parsed: array('a' => array('1', '2'), 'c' => '3')
+	 *     $params = OAuth::parse_params('a=1,a=2,c=3');
+	 *
+	 * @param   string  parameter string
+	 * @return  array
+	 */
+	public static function parse_params($params)
+	{
+		// Split the parameters by &
+		$params = explode('&', trim($params));
+
+		// Create an array of parsed parameters
+		$parsed = array();
+
+		foreach ($params as $param)
+		{
+			// Split the parameter into name and value
+			list($name, $value) = explode('=', $param, 2);
+
+			// Decode the name and value
+			$name  = OAuth::urldecode($name);
+			$value = OAuth::urldecode($value);
+
+			if (isset($parsed[$name]))
+			{
+				if ( ! is_array($parsed[$name]))
+				{
+					// Convert the parameter to an array
+					$parsed[$name] = array($parsed[$name]);
+				}
+
+				// Add a new duplicate parameter
+				$parsed[$name][] = $value;
+			}
+			else
+			{
+				// Add a new parameter
+				$parsed[$name] = $value;
+			}
+		}
+
+		return $parsed;
+	}
+
+} // End OAuth

includes/kohana/modules/oauth/classes/kohana/oauth/consumer.php

@@ -0,0 +1,99 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Consumer
+ *
+ * @package    Kohana/OAuth
+ * @category    Base
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Consumer {
+
+	/**
+	 * Create a new consumer object.
+	 *
+	 *     $consumer = OAuth_Consumer::factory($options);
+	 *
+	 * @param   array  consumer options, key and secret are required
+	 * @return  OAuth_Consumer
+	 */
+	public static function factory(array $options = NULL)
+	{
+		return new OAuth_Consumer($options);
+	}
+
+	/**
+	 * @var  string  consumer key
+	 */
+	protected $key;
+
+	/**
+	 * @var  string  consumer secret
+	 */
+	protected $secret;
+
+	/**
+	 * @var  string  callback URL for OAuth authorization completion
+	 */
+	protected $callback;
+
+	/**
+	 * Sets the consumer key and secret.
+	 *
+	 * @param   array  consumer options, key and secret are required
+	 * @return  void
+	 */
+	public function __construct(array $options = NULL)
+	{
+		if ( ! isset($options['key']))
+		{
+			throw new Kohana_OAuth_Exception('Required option not passed: :option',
+				array(':option' => 'key'));
+		}
+
+		if ( ! isset($options['secret']))
+		{
+			throw new Kohana_OAuth_Exception('Required option not passed: :option',
+				array(':option' => 'secret'));
+		}
+
+		$this->key = $options['key'];
+
+		$this->secret = $options['secret'];
+
+		if (isset($options['callback']))
+		{
+			$this->callback = $options['callback'];
+		}
+	}
+
+	/**
+	 * Return the value of any protected class variable.
+	 *
+	 *     // Get the consumer key
+	 *     $key = $consumer->key;
+	 *
+	 * @param   string  variable name
+	 * @return  mixed
+	 */
+	public function __get($key)
+	{
+		return $this->$key;
+	}
+
+	/**
+	 * Change the consumer callback.
+	 *
+	 * @param   string  new consumer callback
+	 * @return  $this
+	 */
+	public function callback($callback)
+	{
+		$this->callback = $callback;
+
+		return $this;
+	}
+
+} // End OAuth_Consumer

includes/kohana/modules/oauth/classes/kohana/oauth/exception.php

@@ -0,0 +1,12 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Exception
+ *
+ * @package    Kohana/OAuth
+ * @category   Exceptions
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Exception extends Kohana_Exception {  }

includes/kohana/modules/oauth/classes/kohana/oauth/provider.php

@@ -0,0 +1,215 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Provider
+ *
+ * @package    Kohana/OAuth
+ * @category   Provider
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+abstract class Kohana_OAuth_Provider {
+
+	/**
+	 * Create a new provider.
+	 *
+	 *     // Load the Twitter provider
+	 *     $provider = OAuth_Provider::factory('twitter');
+	 *
+	 * @param   string   provider name
+	 * @param   array    provider options
+	 * @return  OAuth_Provider
+	 */
+	public static function factory($name, array $options = NULL)
+	{
+		$class = 'OAuth_Provider_'.$name;
+
+		return new $class($options);
+	}
+
+	/**
+	 * @var  string  provider name
+	 */
+	public $name;
+
+	/**
+	 * @var  array  additional request parameters to be used for remote requests
+	 */
+	protected $params = array();
+
+	/**
+	 * Overloads default class properties from the options.
+	 *
+	 * Any of the provider options can be set here:
+	 *
+	 * Type      | Option        | Description                                    | Default Value
+	 * ----------|---------------|------------------------------------------------|-----------------
+	 * mixed     | signature     | Signature method name or object                | provider default
+	 *
+	 * @param   array   provider options
+	 * @return  void
+	 */
+	public function __construct(array $options = NULL)
+	{
+		if (isset($options['signature']))
+		{
+			// Set the signature method name or object
+			$this->signature = $options['signature'];
+		}
+
+		if ( ! is_object($this->signature))
+		{
+			// Convert the signature name into an object
+			$this->signature = OAuth_Signature::factory($this->signature);
+		}
+
+		if ( ! $this->name)
+		{
+			// Attempt to guess the name from the class name
+			$this->name = strtolower(substr(get_class($this), strlen('OAuth_Provider_')));
+		}
+	}
+
+	/**
+	 * Return the value of any protected class variable.
+	 *
+	 *     // Get the provider signature
+	 *     $signature = $provider->signature;
+	 *
+	 * @param   string  variable name
+	 * @return  mixed
+	 */
+	public function __get($key)
+	{
+		return $this->$key;
+	}
+
+	/**
+	 * Returns the request token URL for the provider.
+	 *
+	 *     $url = $provider->url_request_token();
+	 *
+	 * @return  string
+	 */
+	abstract public function url_request_token();
+
+	/**
+	 * Returns the authorization URL for the provider.
+	 *
+	 *     $url = $provider->url_authorize();
+	 *
+	 * @return  string
+	 */
+	abstract public function url_authorize();
+
+	/**
+	 * Returns the access token endpoint for the provider.
+	 *
+	 *     $url = $provider->url_access_token();
+	 *
+	 * @return  string
+	 */
+	abstract public function url_access_token();
+
+	/**
+	 * Ask for a request token from the OAuth provider.
+	 *
+	 *     $token = $provider->request_token($consumer);
+	 *
+	 * @param   OAuth_Consumer  consumer
+	 * @param   array           additional request parameters
+	 * @return  OAuth_Token_Request
+	 * @uses    OAuth_Request_Token
+	 */
+	public function request_token(OAuth_Consumer $consumer, array $params = NULL)
+	{
+		// Create a new GET request for a request token with the required parameters
+		$request = OAuth_Request::factory('token', 'GET', $this->url_request_token(), array(
+			'oauth_consumer_key' => $consumer->key,
+			'oauth_callback'     => $consumer->callback,
+		));
+
+		if ($params)
+		{
+			// Load user parameters
+			$request->params($params);
+		}
+
+		// Sign the request using only the consumer, no token is available yet
+		$request->sign($this->signature, $consumer);
+
+		// Create a response from the request
+		$response = $request->execute();
+
+		// Store this token somewhere useful
+		return OAuth_Token::factory('request', array(
+			'token'  => $response->param('oauth_token'),
+			'secret' => $response->param('oauth_token_secret'),
+		));
+	}
+
+	/**
+	 * Get the authorization URL for the request token.
+	 *
+	 *     $this->request->redirect($provider->authorize_url($token));
+	 *
+	 * @param   OAuth_Token_Request  token
+	 * @param   array                additional request parameters
+	 * @return  string
+	 */
+	public function authorize_url(OAuth_Token_Request $token, array $params = NULL)
+	{
+		// Create a new GET request for a request token with the required parameters
+		$request = OAuth_Request::factory('authorize', 'GET', $this->url_authorize(), array(
+			'oauth_token' => $token->token,
+		));
+
+		if ($params)
+		{
+			// Load user parameters
+			$request->params($params);
+		}
+
+		return $request->as_url();
+	}
+
+	/**
+	 * Exchange the request token for an access token.
+	 *
+	 *     $token = $provider->access_token($consumer, $token);
+	 *
+	 * @param   OAuth_Consumer       consumer
+	 * @param   OAuth_Token_Request  token
+	 * @param   array                additional request parameters
+	 * @return  OAuth_Token_Access
+	 */
+	public function access_token(OAuth_Consumer $consumer, OAuth_Token_Request $token, array $params = NULL)
+	{
+		// Create a new GET request for a request token with the required parameters
+		$request = OAuth_Request::factory('access', 'GET', $this->url_access_token(), array(
+			'oauth_consumer_key' => $consumer->key,
+			'oauth_token'        => $token->token,
+			'oauth_verifier'     => $token->verifier,
+		));
+
+		if ($params)
+		{
+			// Load user parameters
+			$request->params($params);
+		}
+
+		// Sign the request using only the consumer, no token is available yet
+		$request->sign($this->signature, $consumer, $token);
+
+		// Create a response from the request
+		$response = $request->execute();
+
+		// Store this token somewhere useful
+		return OAuth_Token::factory('access', array(
+			'token'  => $response->param('oauth_token'),
+			'secret' => $response->param('oauth_token_secret'),
+		));
+	}
+
+} // End OAuth_Signature

includes/kohana/modules/oauth/classes/kohana/oauth/provider/google.php

@@ -0,0 +1,55 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+/**
+ * OAuth Google Provider
+ *
+ * Documents for implementing Google OAuth can be found at
+ * <http://code.google.com/apis/accounts/docs/OAuth.html>.
+ * Individual Google APIs have separate documentation. A complete list is
+ * available at <http://code.google.com/more/>.
+ *
+ * [!!] This class does not implement any Google API. It is only an
+ * implementation of standard OAuth with Google as the service provider.
+ *
+ * @package    Kohana/OAuth
+ * @category   Provider
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Provider_Google extends OAuth_Provider {
+
+	public $name = 'google';
+
+	protected $signature = 'HMAC-SHA1';
+
+	public function url_request_token()
+	{
+		return 'https://www.google.com/accounts/OAuthGetRequestToken';
+	}
+
+	public function url_authorize()
+	{
+		return 'https://www.google.com/accounts/OAuthAuthorizeToken';
+	}
+
+	public function url_access_token()
+	{
+		return 'https://www.google.com/accounts/OAuthGetAccessToken';
+	}
+
+	public function request_token(OAuth_Consumer $consumer, array $params = NULL)
+	{
+		if ( ! isset($params['scope']))
+		{
+			// All request tokens must specify the data scope to access
+			// http://code.google.com/apis/accounts/docs/OAuth.html#prepScope
+			throw new Kohana_OAuth_Exception('Required parameter to not passed: :param', array(
+				':param' => 'scope',
+			));
+		}
+
+		return parent::request_token($consumer, $params);
+	}
+
+} // End OAuth_Provider_Google

includes/kohana/modules/oauth/classes/kohana/oauth/provider/twitter.php

@@ -0,0 +1,39 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+/**
+ * OAuth Twitter Provider
+ *
+ * Documents for implementing Twitter OAuth can be found at
+ * <http://dev.twitter.com/pages/auth>.
+ *
+ * [!!] This class does not implement the Twitter API. It is only an
+ * implementation of standard OAuth with Twitter as the service provider.
+ *
+ * @package    Kohana/OAuth
+ * @category   Provider
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Provider_Twitter extends OAuth_Provider {
+
+	public $name = 'twitter';
+
+	protected $signature = 'HMAC-SHA1';
+
+	public function url_request_token()
+	{
+		return 'https://api.twitter.com/oauth/request_token';
+	}
+
+	public function url_authorize()
+	{
+		return 'https://api.twitter.com/oauth/authenticate';
+	}
+
+	public function url_access_token()
+	{
+		return 'https://api.twitter.com/oauth/access_token';
+	}
+
+} // End OAuth_Provider_Twitter

includes/kohana/modules/oauth/classes/kohana/oauth/request.php

@@ -0,0 +1,509 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Request
+ *
+ * @package    Kohana/OAuth
+ * @category   Request
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Request {
+
+	/**
+	 * Create a new request object.
+	 *
+	 *     $request = OAuth_Request::factory('token', 'http://example.com/oauth/request_token');
+	 *
+	 * @param   string  request type
+	 * @param   string  request URL
+	 * @param   string  request method
+	 * @param   array   request parameters
+	 * @return  OAuth_Request
+	 */
+	public static function factory($type, $method, $url = NULL, array $params = NULL)
+	{
+		$class = 'OAuth_Request_'.$type;
+
+		return new $class($method, $url, $params);
+	}
+
+	/**
+	 * @var  integer  connection timeout
+	 */
+	public $timeout = 10;
+
+	/**
+	 * @var  boolean  send Authorization header?
+	 */
+	public $send_header = TRUE;
+
+	/**
+	 * @var  string  request type name: token, authorize, access, resource
+	 */
+	protected $name;
+
+	/**
+	 * @var  string  request method: GET, POST, etc
+	 */
+	protected $method = 'GET';
+
+	/**
+	 * @var  string  request URL
+	 */
+	protected $url;
+
+	/**
+	 * @var   array   request parameters
+	 */
+	protected $params = array();
+
+	/**
+	 * @var  array  upload parameters
+	 */
+	protected $upload = array();
+
+	/**
+	 * @var  array  required parameters
+	 */
+	protected $required = array();
+
+	/**
+	 * Set the request URL, method, and parameters.
+	 *
+	 * @param  string  request method
+	 * @param  string  request URL
+	 * @param  array   request parameters
+	 * @uses   OAuth::parse_url
+	 */
+	public function __construct($method, $url, array $params = NULL)
+	{
+		if ($method)
+		{
+			// Set the request method
+			$this->method = strtoupper($method);
+		}
+
+		// Separate the URL and query string, which will be used as additional
+		// default parameters
+		list ($url, $default) = OAuth::parse_url($url);
+
+		// Set the request URL
+		$this->url = $url;
+
+		if ($default)
+		{
+			// Set the default parameters
+			$this->params($default);
+		}
+
+		if ($params)
+		{
+			// Set the request parameters
+			$this->params($params);
+		}
+
+		if ($this->required('oauth_version') AND ! isset($this->params['oauth_version']))
+		{
+			// Set the version of this request
+			$this->params['oauth_version'] = OAuth::$version;
+		}
+
+		if ($this->required('oauth_timestamp') AND ! isset($this->params['oauth_timestamp']))
+		{
+			// Set the timestamp of this request
+			$this->params['oauth_timestamp'] = $this->timestamp();
+		}
+
+		if ($this->required('oauth_nonce') AND ! isset($this->params['oauth_nonce']))
+		{
+			// Set the unique nonce of this request
+			$this->params['oauth_nonce'] = $this->nonce();
+		}
+	}
+
+	/**
+	 * Return the value of any protected class variable.
+	 *
+	 *     // Get the request parameters
+	 *     $params = $request->params;
+	 *
+	 *     // Get the request URL
+	 *     $url = $request->url;
+	 *
+	 * @param   string  variable name
+	 * @return  mixed
+	 */
+	public function __get($key)
+	{
+		return $this->$key;
+	}
+
+	/**
+	 * Generates the UNIX timestamp for a request.
+	 *
+	 *     $time = $request->timestamp();
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec 8](http://oauth.net/core/1.0/#rfc.section.8).
+	 *
+	 * @return  integer
+	 */
+	public function timestamp()
+	{
+		return time();
+	}
+
+	/**
+	 * Generates the nonce for a request.
+	 *
+	 *     $nonce = $request->nonce();
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec 8](http://oauth.net/core/1.0/#rfc.section.8).
+	 *
+	 * @return  string
+	 * @uses    Text::random
+	 */
+	public function nonce()
+	{
+		return Text::random('alnum', 40);
+	}
+
+	/**
+	 * Get the base signature string for a request.
+	 *
+	 *     $base = $request->base_string();
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec A5.1](http://oauth.net/core/1.0/#rfc.section.A.5.1).
+	 *
+	 * @param   OAuth_Request   request to sign
+	 * @return  string
+	 * @uses    OAuth::urlencode
+	 * @uses    OAuth::normalize_params
+	 */
+	public function base_string()
+	{
+		$url = $this->url;
+
+		// Get the request parameters
+		$params = array_diff_key($this->params, $this->upload);
+
+		// "oauth_signature" is never included in the base string!
+		unset($params['oauth_signature']);
+
+		// method & url & sorted-parameters
+		return implode('&', array(
+			$this->method,
+			OAuth::urlencode($url),
+			OAuth::urlencode(OAuth::normalize_params($params)),
+		));
+	}
+
+	/**
+	 * Parameter getter and setter. Setting the value to `NULL` will remove it.
+	 *
+	 *     // Set the "oauth_consumer_key" to a new value
+	 *     $request->param('oauth_consumer_key', $key);
+	 *
+	 *     // Get the "oauth_consumer_key" value
+	 *     $key = $request->param('oauth_consumer_key');
+	 *
+	 * @param   string   parameter name
+	 * @param   mixed    parameter value
+	 * @param   boolean  allow duplicates?
+	 * @return  mixed    when getting
+	 * @return  $this    when setting
+	 * @uses    Arr::get
+	 */
+	public function param($name, $value = NULL, $duplicate = FALSE)
+	{
+		if ($value === NULL)
+		{
+			// Get the parameter
+			return Arr::get($this->params, $name);
+		}
+
+		if (isset($this->params[$name]) AND $duplicate)
+		{
+			if ( ! is_array($this->params[$name]))
+			{
+				// Convert the parameter into an array
+				$this->params[$name] = array($this->params[$name]);
+			}
+
+			// Add the duplicate value
+			$this->params[$name][] = $value;
+		}
+		else
+		{
+			// Set the parameter value
+			$this->params[$name] = $value;
+		}
+
+		return $this;
+	}
+
+	/**
+	 * Set multiple parameters.
+	 *
+	 *     $request->params($params);
+	 *
+	 * @param   array    parameters
+	 * @param   boolean  allow duplicates?
+	 * @return  $this
+	 * @uses    OAuth_Request::param
+	 */
+	public function params(array $params, $duplicate = FALSE)
+	{
+		foreach ($params as $name => $value)
+		{
+			$this->param($name, $value, $duplicate);
+		}
+
+		return $this;
+	}
+
+	/**
+	 * Upload getter and setter. Setting the value to `NULL` will remove it.
+	 *
+	 *     // Set the "image" file path for uploading
+	 *     $request->upload('image', $file_path);
+	 *
+	 *     // Get the "image" file path
+	 *     $key = $request->param('oauth_consumer_key');
+	 *
+	 * @param   string   upload name
+	 * @param   mixed    upload file path
+	 * @return  mixed    when getting
+	 * @return  $this    when setting
+	 * @uses    OAuth_Request::param
+	 */
+	public function upload($name, $value = NULL)
+	{
+		if ($value !== NULL)
+		{
+			// This is an upload parameter
+			$this->upload[$name] = TRUE;
+
+			// Get the mime type of the image
+			$mime = File::mime($value);
+
+			// Format the image path for CURL
+			$value = "@{$value};type={$mime}";
+		}
+
+		return $this->param($name, $value, FALSE);
+	}
+
+	/**
+	 * Get and set required parameters.
+	 *
+	 *     $request->required($field, $value);
+	 *
+	 * @param   string   parameter name
+	 * @param   boolean  field value
+	 * @return  boolean  when getting
+	 * @return  $this    when setting
+	 */
+	public function required($param, $value = NULL)
+	{
+		if ($value === NULL)
+		{
+			// Get the current status
+			return ! empty($this->required[$param]);
+		}
+
+		// Change the requirement value
+		$this->required[$param] = (boolean) $value;
+
+		return $this;
+	}
+
+	/**
+	 * Convert the request parameters into an `Authorization` header.
+	 *
+	 *     $header = $request->as_header();
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec 5.4.1](http://oauth.net/core/1.0/#rfc.section.5.4.1).
+	 *
+	 * @return  string
+	 */
+	public function as_header()
+	{
+		$header = array();
+
+		foreach ($this->params as $name => $value)
+		{
+			if (strpos($name, 'oauth_') === 0)
+			{
+				// OAuth Spec 5.4.1
+				// "Parameter names and values are encoded per Parameter Encoding [RFC 3986]."
+				$header[] = OAuth::urlencode($name).'="'.OAuth::urlencode($value).'"';
+			}
+		}
+
+		return 'OAuth '.implode(', ', $header);
+	}
+
+	/**
+	 * Convert the request parameters into a query string, suitable for GET and
+	 * POST requests.
+	 *
+	 *     $query = $request->as_query();
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec 5.2 (2,3)](http://oauth.net/core/1.0/#rfc.section.5.2).
+	 *
+	 * @param   boolean   include oauth parameters?
+	 * @param   boolean   return a normalized string?
+	 * @return  string
+	 */
+	public function as_query($include_oauth = NULL, $as_string = TRUE)
+	{
+		if ($include_oauth === NULL)
+		{
+			// If we are sending a header, OAuth parameters should not be
+			// included in the query string.
+			$include_oauth = ! $this->send_header;
+		}
+
+		if ($include_oauth)
+		{
+			$params = $this->params;
+		}
+		else
+		{
+			$params = array();
+			foreach ($this->params as $name => $value)
+			{
+				if (strpos($name, 'oauth_') !== 0)
+				{
+					// This is not an OAuth parameter
+					$params[$name] = $value;
+				}
+			}
+		}
+
+		return $as_string ? OAuth::normalize_params($params) : $params;
+	}
+
+	/**
+	 * Return the entire request URL with the parameters as a GET string.
+	 *
+	 *     $url = $request->as_url();
+	 *
+	 * @return  string
+	 * @uses    OAuth_Request::as_query
+	 */
+	public function as_url()
+	{
+		return $this->url.'?'.$this->as_query(TRUE);
+	}
+
+	/**
+	 * Sign the request, setting the `oauth_signature_method` and `oauth_signature`.
+	 *
+	 * @param   OAuth_Signature  signature
+	 * @param   OAuth_Consumer   consumer
+	 * @param   OAuth_Token      token
+	 * @return  $this
+	 * @uses    OAuth_Signature::sign
+	 */
+	public function sign(OAuth_Signature $signature, OAuth_Consumer $consumer, OAuth_Token $token = NULL)
+	{
+		// Create a new signature class from the method
+		$this->param('oauth_signature_method', $signature->name);
+
+		// Sign the request using the consumer and token
+		$this->param('oauth_signature', $signature->sign($this, $consumer, $token));
+
+		return $this;
+	}
+
+	/**
+	 * Checks that all required request parameters have been set. Throws an
+	 * exception if any parameters are missing.
+	 *
+	 *     try
+	 *     {
+	 *         $request->check();
+	 *     }
+	 *     catch (OAuth_Exception $e)
+	 *     {
+	 *         // Request has missing parameters
+	 *     }
+	 *
+	 * @return  TRUE
+	 * @throws  Kohana_OAuth_Exception
+	 */
+	public function check()
+	{
+		foreach ($this->required as $param => $required)
+		{
+			if ($required AND ! isset($this->params[$param]))
+			{
+				throw new Kohana_OAuth_Exception('Request to :url requires missing parameter ":param"', array(
+					':url'   => $this->url,
+					':param' => $param,
+				));
+			}
+		}
+
+		return TRUE;
+	}
+
+	/**
+	 * Execute the request and return a response.
+	 *
+	 * @param   array    additional cURL options
+	 * @return  string   request response body
+	 * @uses    OAuth_Request::check
+	 * @uses    Arr::get
+	 * @uses    Remote::get
+	 */
+	public function execute(array $options = NULL)
+	{
+		// Check that all required fields are set
+		$this->check();
+
+		// Get the URL of the request
+		$url = $this->url;
+
+		if ( ! isset($options[CURLOPT_CONNECTTIMEOUT]))
+		{
+			// Use the request default timeout
+			$options[CURLOPT_CONNECTTIMEOUT] = $this->timeout;
+		}
+
+		if ($this->send_header)
+		{
+			// Get the the current headers
+			$headers = Arr::get($options, CURLOPT_HTTPHEADER, array());
+
+			// Add the Authorization header
+			$headers[] = 'Authorization: '.$this->as_header();
+
+			// Store the new headers
+			$options[CURLOPT_HTTPHEADER] = $headers;
+		}
+
+		if ($this->method === 'POST')
+		{
+			// Send the request as a POST
+			$options[CURLOPT_POST] = TRUE;
+
+			if ($post = $this->as_query(NULL, empty($this->upload)))
+			{
+				// Attach the post fields to the request
+				$options[CURLOPT_POSTFIELDS] = $post;
+			}
+		}
+		elseif ($query = $this->as_query())
+		{
+			// Append the parameters to the query string
+			$url = "{$url}?{$query}";
+		}
+
+		return Remote::get($url, $options);
+	}
+
+} // End OAuth_Request

includes/kohana/modules/oauth/classes/kohana/oauth/request/access.php

@@ -0,0 +1,32 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Access Request
+ *
+ * @package    Kohana/OAuth
+ * @category   Request
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Request_Access extends OAuth_Request {
+
+	protected $name = 'access';
+
+	protected $required = array(
+		'oauth_consumer_key'     => TRUE,
+		'oauth_token'            => TRUE,
+		'oauth_signature_method' => TRUE,
+		'oauth_signature'        => TRUE,
+		'oauth_timestamp'        => TRUE,
+		'oauth_nonce'            => TRUE,
+		'oauth_verifier'         => TRUE,
+		'oauth_version'          => TRUE,
+	);
+
+	public function execute(array $options = NULL)
+	{
+		return OAuth_Response::factory(parent::execute($options));
+	}
+
+} // End OAuth_Request_Access

includes/kohana/modules/oauth/classes/kohana/oauth/request/authorize.php

@@ -0,0 +1,26 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Authorization Request
+ *
+ * @package    Kohana/OAuth
+ * @category   Request
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Request_Authorize extends OAuth_Request {
+
+	protected $name = 'request';
+
+	// http://oauth.net/core/1.0/#rfc.section.6.2.1
+	protected $required = array(
+		'oauth_token' => TRUE,
+	);
+
+	public function execute(array $options = NULL)
+	{
+		return Request::instance()->redirect($this->as_url());
+	}
+
+} // End OAuth_Request_Authorize

includes/kohana/modules/oauth/classes/kohana/oauth/request/credentials.php

@@ -0,0 +1,16 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Credentials Request
+ *
+ * @package    Kohana/OAuth
+ * @category   Request
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Request_Credentials extends OAuth_Request {
+
+
+
+} // End OAuth_Request_Credentials

includes/kohana/modules/oauth/classes/kohana/oauth/request/resource.php

@@ -0,0 +1,27 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Resource Request
+ *
+ * @package    Kohana/OAuth
+ * @category   Request
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Request_Resource extends OAuth_Request {
+
+	protected $name = 'resource';
+
+	// http://oauth.net/core/1.0/#rfc.section.7
+	protected $required = array(
+		'oauth_consumer_key'     => TRUE,
+		'oauth_token'            => TRUE,
+		'oauth_signature_method' => TRUE,
+		'oauth_signature'        => TRUE,
+		'oauth_timestamp'        => TRUE,
+		'oauth_nonce'            => TRUE,
+		'oauth_version'          => TRUE,
+	);
+
+} // End OAuth_Request_Resource

includes/kohana/modules/oauth/classes/kohana/oauth/request/token.php

@@ -0,0 +1,32 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+/**
+ * OAuth Token Request
+ *
+ * @package    Kohana/OAuth
+ * @category   Request
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Request_Token extends OAuth_Request {
+
+	protected $name = 'request';
+
+	// http://oauth.net/core/1.0/#rfc.section.6.3.1
+	protected $required = array(
+		'oauth_callback'         => TRUE,
+		'oauth_consumer_key'     => TRUE,
+		'oauth_signature_method' => TRUE,
+		'oauth_signature'        => TRUE,
+		'oauth_timestamp'        => TRUE,
+		'oauth_nonce'            => TRUE,
+		'oauth_version'          => TRUE,
+	);
+
+	public function execute(array $options = NULL)
+	{
+		return OAuth_Response::factory(parent::execute($options));
+	}
+
+} // End OAuth_Request_Token

includes/kohana/modules/oauth/classes/kohana/oauth/response.php

@@ -0,0 +1,51 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Response
+ *
+ * @package    Kohana/OAuth
+ * @category    Base
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Response {
+
+	public static function factory($body)
+	{
+		return new OAuth_Response($body);
+	}
+
+	/**
+	 * @var   array   response parameters
+	 */
+	protected $params = array();
+
+	public function __construct($body = NULL)
+	{
+		if ($body)
+		{
+			$this->params = OAuth::parse_params($body);
+		}
+	}
+
+	/**
+	 * Return the value of any protected class variable.
+	 *
+	 *     // Get the response parameters
+	 *     $params = $response->params;
+	 *
+	 * @param   string  variable name
+	 * @return  mixed
+	 */
+	public function __get($key)
+	{
+		return $this->$key;
+	}
+
+	public function param($name, $default = NULL)
+	{
+		return Arr::get($this->params, $name, $default);
+	}
+
+} // End OAuth_Response

includes/kohana/modules/oauth/classes/kohana/oauth/server.php

@@ -0,0 +1,14 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Server
+ *
+ * @package    Kohana/OAuth
+ * @category   Server
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+abstract class Kohana_OAuth_Server {
+
+} // End OAuth_Server

includes/kohana/modules/oauth/classes/kohana/oauth/signature.php

@@ -0,0 +1,77 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Signature
+ *
+ * @package    Kohana/OAuth
+ * @category   Signature
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+abstract class Kohana_OAuth_Signature {
+
+	/**
+	 * Create a new signature object by name.
+	 *
+	 *     $signature = OAuth_Signature::factory('HMAC-SHA1');
+	 *
+	 * @param   string  signature name: HMAC-SHA1, PLAINTEXT, etc
+	 * @param   array   signature options
+	 * @return  OAuth_Signature
+	 */
+	public static function factory($name, array $options = NULL)
+	{
+		// Create the class name as a base of this class
+		$class = 'OAuth_Signature_'.str_replace('-', '_', $name);
+
+		return new $class($options);
+	}
+
+	/**
+	 * @var  string  signature name: HMAC-SHA1, PLAINTEXT, etc
+	 */
+	protected $name;
+
+	/**
+	 * Return the value of any protected class variables.
+	 *
+	 *     $name = $signature->name;
+	 *
+	 * @param   string  variable name
+	 * @return  mixed
+	 */
+	public function __get($key)
+	{
+		return $this->$key;
+	}
+
+	/**
+	 * Get a signing key from a consumer and token.
+	 *
+	 *     $key = $signature->key($consumer, $token);
+	 *
+	 * [!!] This method implements the signing key of [OAuth 1.0 Spec 9](http://oauth.net/core/1.0/#rfc.section.9).
+	 *
+	 * @param   OAuth_Consumer  consumer
+	 * @param   OAuth_Token     token
+	 * @return  string
+	 * @uses    OAuth::urlencode
+	 */
+	public function key(OAuth_Consumer $consumer, OAuth_Token $token = NULL)
+	{
+		$key = OAuth::urlencode($consumer->secret).'&';
+
+		if ($token)
+		{
+			$key .= OAuth::urlencode($token->secret);
+		}
+
+		return $key;
+	}
+
+	abstract public function sign(OAuth_Request $request, OAuth_Consumer $consumer, OAuth_Token $token = NULL);
+
+	abstract public function verify($signature, OAuth_Request $request, OAuth_Consumer $consumer, OAuth_Token $token = NULL);
+
+} // End OAuth_Signature

includes/kohana/modules/oauth/classes/kohana/oauth/signature/hmac/sha1.php

@@ -0,0 +1,68 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+/**
+ * The HMAC-SHA1 signature provides secure signing using the HMAC-SHA1
+ * algorithm as defined by [RFC2104](http://tools.ietf.org/html/rfc2104).
+ * It uses [OAuth_Request::base_string] as the text and [OAuth_Signature::key]
+ * as the signing key.
+ *
+ * @package    Kohana/OAuth
+ * @category   Signature
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Signature_HMAC_SHA1 extends OAuth_Signature {
+
+	protected $name = 'HMAC-SHA1';
+
+	/**
+	 * Generate a signed hash of the base string using the consumer and token
+	 * as the signing key.
+	 *
+	 *     $sig = $signature->sign($request, $consumer, $token);
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec 9.2.1](http://oauth.net/core/1.0/#rfc.section.9.2.1).
+	 *
+	 * @param   OAuth_Request   request
+	 * @param   OAuth_Consumer  consumer
+	 * @param   OAuth_Token     token
+	 * @return  string
+	 * @uses    OAuth_Signature::key
+	 * @uses    OAuth_Request::base_string
+	 */
+	public function sign(OAuth_Request $request, OAuth_Consumer $consumer, OAuth_Token $token = NULL)
+	{
+		// Get the signing key
+		$key = $this->key($consumer, $token);
+
+		// Get the base string for the signature
+		$base_string = $request->base_string();
+
+		// Sign the base string using the key
+		return base64_encode(hash_hmac('sha1', $base_string, $key, TRUE));
+	}
+
+	/**
+	 * Verify a HMAC-SHA1 signature.
+	 *
+	 *     if ( ! $signature->verify($signature, $request, $consumer, $token))
+	 *     {
+	 *         throw new Kohana_OAuth_Exception('Failed to verify signature');
+	 *     }
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec 9.2.2](http://oauth.net/core/1.0/#rfc.section.9.2.2).
+	 *
+	 * @param   string          signature to verify
+	 * @param   OAuth_Request   request
+	 * @param   OAuth_Consumer  consumer
+	 * @param   OAuth_Token     token
+	 * @return  boolean
+	 * @uses    OAuth_Signature_HMAC_SHA1::sign
+	 */
+	public function verify($signature, OAuth_Request $request, OAuth_Consumer $consumer, OAuth_Token $token = NULL)
+	{
+		return $signature === $this->sign($request, $consumer, $token);
+	}
+
+} // End OAuth_Signature_HMAC_SHA1

includes/kohana/modules/oauth/classes/kohana/oauth/signature/plaintext.php

@@ -0,0 +1,57 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+/**
+ * The PLAINTEXT signature does not provide any security protection and should
+ * only be used over a secure channel such as HTTPS.
+ *
+ * @package    Kohana/OAuth
+ * @category   Signature
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Signature_PLAINTEXT extends OAuth_Signature {
+
+	protected $name = 'PLAINTEXT';
+
+	/**
+	 * Generate a plaintext signature for the request _without_ the base string.
+	 *
+	 *     $sig = $signature->sign($request, $consumer, $token);
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec 9.4.1](http://oauth.net/core/1.0/#rfc.section.9.4.1).
+	 *
+	 * @param   OAuth_Request   request
+	 * @param   OAuth_Consumer  consumer
+	 * @param   OAuth_Token     token
+	 * @return  $this
+	 */
+	public function sign(OAuth_Request $request, OAuth_Consumer $consumer, OAuth_Token $token = NULL)
+	{
+		// Use the signing key as the signature
+		return $this->key($consumer, $token);
+	}
+
+	/**
+	 * Verify a plaintext signature.
+	 *
+	 *     if ( ! $signature->verify($signature, $request, $consumer, $token))
+	 *     {
+	 *         throw new Kohana_OAuth_Exception('Failed to verify signature');
+	 *     }
+	 *
+	 * [!!] This method implements [OAuth 1.0 Spec 9.4.2](http://oauth.net/core/1.0/#rfc.section.9.4.2).
+	 *
+	 * @param   string          signature to verify
+	 * @param   OAuth_Request   request
+	 * @param   OAuth_Consumer  consumer
+	 * @param   OAuth_Token     token
+	 * @return  boolean
+	 * @uses    OAuth_Signature_PLAINTEXT::sign
+	 */
+	public function verify($signature, OAuth_Request $request, OAuth_Consumer $consumer, OAuth_Token $token = NULL)
+	{
+		return $signature === $this->key($consumer, $token);
+	}
+
+} // End OAuth_Signature_PLAINTEXT

includes/kohana/modules/oauth/classes/kohana/oauth/token.php

@@ -0,0 +1,94 @@
+<?php defined('SYSPATH') OR die('No direct access allowed.');
+/**
+ * OAuth Token
+ *
+ * @package    Kohana/OAuth
+ * @category   Token
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+abstract class Kohana_OAuth_Token {
+
+	/**
+	 * Create a new token object.
+	 *
+	 *     $token = OAuth_Token::factory($name);
+	 *
+	 * @param   string  token type
+	 * @param   array   token options
+	 * @return  OAuth_Token
+	 */
+	public static function factory($name, array $options = NULL)
+	{
+		$class = 'OAuth_Token_'.$name;
+
+		return new $class($options);
+	}
+
+	/**
+	 * @var  string  token type name: request, access
+	 */
+	protected $name;
+
+	/**
+	 * @var  string  token key
+	 */
+	protected $token;
+
+	/**
+	 * @var  string  token secret
+	 */
+	protected $secret;
+
+	/**
+	 * Sets the token and secret values.
+	 *
+	 * @param   array   token options
+	 * @return  void
+	 */
+	public function __construct(array $options = NULL)
+	{
+		if ( ! isset($options['token']))
+		{
+			throw new Kohana_OAuth_Exception('Required option not passed: :option',
+				array(':option' => 'token'));
+		}
+
+		if ( ! isset($options['secret']))
+		{
+			throw new Kohana_OAuth_Exception('Required option not passed: :option',
+				array(':option' => 'secret'));
+		}
+
+		$this->token = $options['token'];
+
+		$this->secret = $options['secret'];
+	}
+
+	/**
+	 * Return the value of any protected class variable.
+	 *
+	 *     // Get the token secret
+	 *     $secret = $token->secret;
+	 *
+	 * @param   string  variable name
+	 * @return  mixed
+	 */
+	public function __get($key)
+	{
+		return $this->$key;
+	}
+
+	/**
+	 * Returns the token key.
+	 *
+	 * @return  string
+	 */
+	public function __toString()
+	{
+		return (string) $this->token;
+	}
+
+} // End OAuth_Token

includes/kohana/modules/oauth/classes/kohana/oauth/token/access.php

@@ -0,0 +1,16 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+/**
+ * OAuth Access Token
+ *
+ * @package    Kohana/OAuth
+ * @category   Token
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Token_Access extends OAuth_Token {
+
+	protected $name = 'access';
+
+} // End OAuth_Token_Access

includes/kohana/modules/oauth/classes/kohana/oauth/token/request.php

@@ -0,0 +1,36 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+/**
+ * OAuth Request Token
+ *
+ * @package    Kohana/OAuth
+ * @category   Token
+ * @author     Kohana Team
+ * @copyright  (c) 2010 Kohana Team
+ * @license    http://kohanaframework.org/license
+ * @since      3.0.7
+ */
+class Kohana_OAuth_Token_Request extends OAuth_Token {
+
+	protected $name = 'request';
+
+	/**
+	 * @var  string  request token verifier
+	 */
+	protected $verifier;
+
+	/**
+	 * Change the token verifier.
+	 *
+	 *     $token->verifier($key);
+	 *
+	 * @param   string   new verifier
+	 * @return  $this
+	 */
+	public function verifier($verifier)
+	{
+		$this->verifier = $verifier;
+
+		return $this;
+	}
+
+} // End OAuth_Token_Request

includes/kohana/modules/oauth/classes/oauth.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth extends Kohana_OAuth {  }

includes/kohana/modules/oauth/classes/oauth/consumer.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Consumer extends Kohana_OAuth_Consumer {  }

includes/kohana/modules/oauth/classes/oauth/provider.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+abstract class OAuth_Provider extends Kohana_OAuth_Provider {  }

includes/kohana/modules/oauth/classes/oauth/provider/google.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Provider_Google extends Kohana_OAuth_Provider_Google {  }

includes/kohana/modules/oauth/classes/oauth/provider/twitter.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Provider_Twitter extends Kohana_OAuth_Provider_Twitter {  }

includes/kohana/modules/oauth/classes/oauth/request.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+abstract class OAuth_Request extends Kohana_OAuth_Request {  }

includes/kohana/modules/oauth/classes/oauth/request/access.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Request_Access extends Kohana_OAuth_Request_Access {  }

includes/kohana/modules/oauth/classes/oauth/request/authorize.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Request_Authorize extends Kohana_OAuth_Request_Authorize {  }

includes/kohana/modules/oauth/classes/oauth/request/credentials.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Request_Credentials extends Kohana_OAuth_Request_Credentials {  }

includes/kohana/modules/oauth/classes/oauth/request/resource.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Request_Resource extends Kohana_OAuth_Request_Resource {  }

includes/kohana/modules/oauth/classes/oauth/request/token.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Request_Token extends Kohana_OAuth_Request_Token {  }

includes/kohana/modules/oauth/classes/oauth/response.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Response extends Kohana_OAuth_Response {  }

includes/kohana/modules/oauth/classes/oauth/signature.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+abstract class OAuth_Signature extends Kohana_OAuth_Signature {  }

includes/kohana/modules/oauth/classes/oauth/signature/hmac/sha1.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Signature_HMAC_SHA1 extends Kohana_OAuth_Signature_HMAC_SHA1 {  }

includes/kohana/modules/oauth/classes/oauth/signature/plaintext.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Signature_PLAINTEXT extends Kohana_OAuth_Signature_PLAINTEXT {  }

includes/kohana/modules/oauth/classes/oauth/token.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+abstract class OAuth_Token extends Kohana_OAuth_Token {  }

includes/kohana/modules/oauth/classes/oauth/token/access.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Token_Access extends Kohana_OAuth_Token_Access {  }

includes/kohana/modules/oauth/classes/oauth/token/request.php

@@ -0,0 +1,3 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+class OAuth_Token_Request extends Kohana_OAuth_Token_Request {  }

includes/kohana/modules/oauth/config/oauth.php

@@ -0,0 +1,15 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+/**
+ * Configuration for OAuth providers.
+ */
+return array(
+	/**
+	 * Twitter applications can be registered at https://twitter.com/apps.
+	 * You will be given a "consumer key" and "consumer secret", which must
+	 * be provided when making OAuth requests.
+	 */
+	'twitter' => array(
+		'key' => 'your consumer key',
+		'secret' => 'your consumer secret'
+	),
+);

includes/kohana/modules/oauth/config/userguide.php

@@ -0,0 +1,23 @@
+<?php defined('SYSPATH') or die('No direct script access.');
+
+return array(
+	// Leave this alone
+	'modules' => array(
+
+		// This should be the path to this modules userguide pages, without the 'guide/'. Ex: '/guide/modulename/' would be 'modulename'
+		'oauth' => array(
+
+			// Whether this modules userguide pages should be shown
+			'enabled' => TRUE,
+			
+			// The name that should show up on the userguide index page
+			'name' => 'OAuth',
+
+			// A short description of this module, shown on the index page
+			'description' => 'Open protocol authorization.',
+			
+			// Copyright message, shown in the footer for this module
+			'copyright' => '&copy; 2008–2010 Kohana Team',
+		)	
+	)
+);

includes/kohana/modules/oauth/guide/oauth/config.md

@@ -0,0 +1,24 @@
+# OAuth Configuration
+
+All configuration for OAuth is done in the `config/oauth.php` file. The configuration file is organized by the provider name.
+
+## Example Configuration File
+
+    return array(
+        /**
+         * Twitter application registration: https://twitter.com/apps
+         */
+        'twitter' => array(
+            'key' => 'your consumer key',
+            'secret' => 'your consumer secret'
+        ),
+        /**
+         * Google application registration: https://www.google.com/accounts/ManageDomains
+         */
+        'google' => array(
+            'key' => 'your domain name',
+            'secret' => 'your consumer secret'
+        ),
+    );
+
+[!!] The consumer key and secret **must** be defined for all providers.

includes/kohana/modules/oauth/guide/oauth/index.md

@@ -0,0 +1,14 @@
+# About OAuth
+
+[OAuth](http://oauth.net/) is an open protocol to allow secure API authorization in a simple and standard method from desktop and web applications. This module provides a pure PHP implementation of the OAuth v1.0 protocol, with support for PLAINTEXT and HMAC-SHA1 signatures.
+
+## Supported Providers
+
+The following providers are available by default:
+
+* [Twitter](http://twitter.com/) using [OAuth_Provider_Twitter]
+* [Google](http://www.google.com/) using [OAuth_Provider_Google]
+
+Additional providers can be created by creating an extension of [OAuth_Provider].
+
+

includes/kohana/modules/oauth/guide/oauth/menu.md

@@ -0,0 +1,3 @@
+## [OAuth]()
+- [Configuration](config)
+- [Usage](usage)

includes/kohana/modules/oauth/guide/oauth/usage.md

@@ -0,0 +1,3 @@
+# OAuth Usage
+
+[!!] This is a stub. Please see [controller/oauth source](http://github.com/kohana/oauth/tree/206c20033e209f233c9e7dc72836bfb786bd7e34/classes/controller) for now. The methods [OAuth_Provider_Google::user_profile] and [OAuth_Provider_Twitter::update_status] no longer exist in the current git master branch.

includes/kohana/modules/oauth/views/oauth/twitter/tweet.php

@@ -0,0 +1,15 @@
+<?php echo Form::open() ?>
+
+<dl>
+	<dt><?php echo Form::label('tweet', 'Update Twitter Status?') ?></dt>
+	<dd><?php echo Form::textarea('tweet', $tweet) ?></dd>
+</dl>
+
+<?php echo Form::submit(NULL, 'Send') ?>
+
+<?php echo Form::close() ?>
+
+<?php if ($response): ?>
+<p>Response from Twitter:</p>
+<?php echo $response ?>
+<?php endif ?>