summaryrefslogtreecommitdiffstats
path: root/samples
diff options
context:
space:
mode:
authorAndrew Arnott <andrewarnott@gmail.com>2011-04-23 17:03:24 -0700
committerAndrew Arnott <andrewarnott@gmail.com>2011-04-23 17:03:24 -0700
commitd01b8ce1bdc289dcee5206d88b3a3dc88dc358a8 (patch)
treec9f4f1af7e077ef25c0d5d7f306ec88110e681fb /samples
parent286e9f8875f5f27860a6a0700d573d5681ad791f (diff)
downloadDotNetOpenAuth-d01b8ce1bdc289dcee5206d88b3a3dc88dc358a8.zip
DotNetOpenAuth-d01b8ce1bdc289dcee5206d88b3a3dc88dc358a8.tar.gz
DotNetOpenAuth-d01b8ce1bdc289dcee5206d88b3a3dc88dc358a8.tar.bz2
Added sample trustedProviders config tag to all sample RPs.
Diffstat (limited to 'samples')
-rw-r--r--samples/OpenIdRelyingPartyMvc/Web.config7
-rw-r--r--samples/OpenIdRelyingPartyWebFormsVB/Web.config7
-rw-r--r--samples/OpenIdWebRingSsoRelyingParty/Web.config7
3 files changed, 18 insertions, 3 deletions
diff --git a/samples/OpenIdRelyingPartyMvc/Web.config b/samples/OpenIdRelyingPartyMvc/Web.config
index 8101fb2..9561a28 100644
--- a/samples/OpenIdRelyingPartyMvc/Web.config
+++ b/samples/OpenIdRelyingPartyMvc/Web.config
@@ -38,7 +38,12 @@
<dotNetOpenAuth>
<openid>
<relyingParty>
- <security requireSsl="false" />
+ <security requireSsl="false">
+ <!-- Uncomment the trustedProviders tag if your relying party should only accept positive assertions from a closed set of OpenID Providers. -->
+ <!--<trustedProviders rejectAssertionsFromUntrustedProviders="true">
+ <add endpoint="https://www.google.com/accounts/o8/ud" />
+ </trustedProviders>-->
+ </security>
<behaviors>
<!-- The following OPTIONAL behavior allows RPs to use SREG only, but be compatible
with OPs that use Attribute Exchange (in various formats). -->
diff --git a/samples/OpenIdRelyingPartyWebFormsVB/Web.config b/samples/OpenIdRelyingPartyWebFormsVB/Web.config
index 36174a5..51b3d26 100644
--- a/samples/OpenIdRelyingPartyWebFormsVB/Web.config
+++ b/samples/OpenIdRelyingPartyWebFormsVB/Web.config
@@ -28,7 +28,12 @@
<dotNetOpenAuth>
<openid>
<relyingParty>
- <security requireSsl="false" />
+ <security requireSsl="false">
+ <!-- Uncomment the trustedProviders tag if your relying party should only accept positive assertions from a closed set of OpenID Providers. -->
+ <!--<trustedProviders rejectAssertionsFromUntrustedProviders="true">
+ <add endpoint="https://www.google.com/accounts/o8/ud" />
+ </trustedProviders>-->
+ </security>
<behaviors>
<!-- The following OPTIONAL behavior allows RPs to use SREG only, but be compatible
with OPs that use Attribute Exchange (in various formats). -->
diff --git a/samples/OpenIdWebRingSsoRelyingParty/Web.config b/samples/OpenIdWebRingSsoRelyingParty/Web.config
index 3f50723..98e5c3f 100644
--- a/samples/OpenIdWebRingSsoRelyingParty/Web.config
+++ b/samples/OpenIdWebRingSsoRelyingParty/Web.config
@@ -40,7 +40,12 @@
<dotNetOpenAuth>
<openid>
<relyingParty>
- <security requireSsl="false" />
+ <security requireSsl="false">
+ <!-- Uncomment the trustedProviders tag if your relying party should only accept positive assertions from a closed set of OpenID Providers. -->
+ <!--<trustedProviders rejectAssertionsFromUntrustedProviders="true">
+ <add endpoint="https://www.google.com/accounts/o8/ud" />
+ </trustedProviders>-->
+ </security>
<behaviors>
<!-- The following OPTIONAL behavior allows RPs to use SREG only, but be compatible
with OPs that use Attribute Exchange (in various formats). -->