Added PAPE max_auth_time handling to sample OP

The OpenIdRelyingPartyWebForms and OpenIdProviderMvc samples now
interact via PAPE to sample enforcement of the PAPE max_auth_time
parameter.

1 files changed, 12 insertions, 0 deletions

diff --git a/samples/OpenIdProviderMvc/Code/FormsAuthenticationService.cs b/samples/OpenIdProviderMvc/Code/FormsAuthenticationService.cs
index 22db860..1f5ea54 100644
--- a/samples/OpenIdProviderMvc/Code/FormsAuthenticationService.cs
+++ b/samples/OpenIdProviderMvc/Code/FormsAuthenticationService.cs
@@ -10,6 +10,18 @@
 			get { return HttpContext.Current.User.Identity.Name; }
 		}
 
+		public DateTime? SignedInTimestampUtc {
+			get {
+				var cookie = HttpContext.Current.Request.Cookies[FormsAuthentication.FormsCookieName];
+				if (cookie != null) {
+					var ticket = FormsAuthentication.Decrypt(cookie.Value);
+					return ticket.IssueDate.ToUniversalTime();
+				} else {
+					return null;
+				}
+			}
+		}
+
 		public void SignIn(string userName, bool createPersistentCookie) {
 			FormsAuthentication.SetAuthCookie(userName, createPersistentCookie);
 		}