summaryrefslogtreecommitdiffstats
path: root/samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs
diff options
context:
space:
mode:
authorAndrew Arnott <andrewarnott@gmail.com>2011-06-13 17:35:51 -0700
committerAndrew Arnott <andrewarnott@gmail.com>2011-06-13 17:35:51 -0700
commit1c99bf16c5b570cadcf27d0b9ce3d598d06b34ca (patch)
tree24c320ffe3ec59144669b817d717c22fecd2ffc4 /samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs
parentf897ab5edf023ea6ca2b36b9075bd7dfbe3a6cde (diff)
parentbdf648e967b58b7220f0de14a0f58ed8c7a93d41 (diff)
downloadDotNetOpenAuth-1c99bf16c5b570cadcf27d0b9ce3d598d06b34ca.zip
DotNetOpenAuth-1c99bf16c5b570cadcf27d0b9ce3d598d06b34ca.tar.gz
DotNetOpenAuth-1c99bf16c5b570cadcf27d0b9ce3d598d06b34ca.tar.bz2
Merging in draft 16 compliance branch.
Diffstat (limited to 'samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs')
-rw-r--r--samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs2
1 files changed, 1 insertions, 1 deletions
diff --git a/samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs b/samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs
index d2583a2..e2e4325 100644
--- a/samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs
+++ b/samples/OAuthAuthorizationServer/Code/OAuth2AuthorizationServer.cs
@@ -53,7 +53,7 @@
// NEVER issue an auto-approval to a client that would end up getting an access token immediately
// (without a client secret), as that would allow ANY client to spoof an approved client's identity
// and obtain unauthorized access to user data.
- if (EndUserAuthorizationRequest.ResponseType == EndUserAuthorizationResponseTypes.AuthorizationCode) {
+ if (authorizationRequest.ResponseType == EndUserAuthorizationResponseType.AuthorizationCode) {
// Never issue auto-approval if the client secret is blank, since that too makes it easy to spoof
// a client's identity and obtain unauthorized access.
var requestingClient = MvcApplication.DataContext.Clients.First(c => c.ClientIdentifier == authorizationRequest.ClientIdentifier);