Added authorizing user to the verification code.

The username is encrypted to avoid disclosing data to the client or a third party.

1 files changed, 4 insertions, 4 deletions

diff --git a/src/DotNetOpenAuth/OAuthWrap/ChannelElements/VerificationCode.cs b/src/DotNetOpenAuth/OAuthWrap/ChannelElements/VerificationCode.cs
index e99a685..cc7f764 100644
--- a/src/DotNetOpenAuth/OAuthWrap/ChannelElements/VerificationCode.cs
+++ b/src/DotNetOpenAuth/OAuthWrap/ChannelElements/VerificationCode.cs
@@ -74,10 +74,10 @@ namespace DotNetOpenAuth.OAuthWrap.ChannelElements {
 			// Encrypt the authorizing username so as to not expose unintended private user data
 			// to the client or any eavesdropping third party.
 			if (this.User != null) {
-				// TODO: code here
+				this.User = MessagingUtilities.Encrypt(this.User, this.Channel.AuthorizationServer.Secret);
 			}
 
-			this.Signature = CalculateSignature();
+			this.Signature = this.CalculateSignature();
 		}
 
 		/// <summary>
@@ -90,7 +90,7 @@ namespace DotNetOpenAuth.OAuthWrap.ChannelElements {
 
 			// Decrypt the authorizing username.
 			if (this.User != null) {
-				// TODO: code here
+				this.User = MessagingUtilities.Decrypt(this.User, this.Channel.AuthorizationServer.Secret);
 			}
 		}
 
@@ -100,7 +100,7 @@ namespace DotNetOpenAuth.OAuthWrap.ChannelElements {
 			Contract.Ensures(Contract.Result<VerificationCode>() != null);
 
 			// Construct a new instance of this type.
-			VerificationCode self = new VerificationCode(channel);
+			var self = new VerificationCode(channel);
 			var fields = channel.MessageDescriptions.GetAccessor(self);
 
 			// Deserialize into this newly created instance.