diff options
Diffstat (limited to 'projecttemplates/MvcRelyingParty/Controllers/AccountController.cs')
| -rw-r--r-- | projecttemplates/MvcRelyingParty/Controllers/AccountController.cs | 181 |
1 files changed, 0 insertions, 181 deletions
diff --git a/projecttemplates/MvcRelyingParty/Controllers/AccountController.cs b/projecttemplates/MvcRelyingParty/Controllers/AccountController.cs index 2fd3ea1..a322f7d 100644 --- a/projecttemplates/MvcRelyingParty/Controllers/AccountController.cs +++ b/projecttemplates/MvcRelyingParty/Controllers/AccountController.cs @@ -20,150 +20,6 @@ [HandleError] public class AccountController : Controller { - /// <summary> - /// Initializes a new instance of the <see cref="AccountController"/> class. - /// </summary> - /// <remarks> - /// This constructor is used by the MVC framework to instantiate the controller using - /// the default forms authentication and OpenID services. - /// </remarks> - public AccountController() - : this(null, null) { - } - - /// <summary> - /// Initializes a new instance of the <see cref="AccountController"/> class. - /// </summary> - /// <param name="formsAuth">The forms auth.</param> - /// <param name="relyingParty">The relying party.</param> - /// <remarks> - /// This constructor is not used by the MVC framework but is instead provided for ease - /// of unit testing this type. - /// </remarks> - public AccountController(IFormsAuthentication formsAuth, IOpenIdRelyingParty relyingParty) { - this.FormsAuth = formsAuth ?? new FormsAuthenticationService(); - this.RelyingParty = relyingParty ?? new OpenIdRelyingPartyService(); - } - - /// <summary> - /// Gets the forms authentication module to use. - /// </summary> - public IFormsAuthentication FormsAuth { get; private set; } - - /// <summary> - /// Gets the OpenID relying party to use for logging users in. - /// </summary> - public IOpenIdRelyingParty RelyingParty { get; private set; } - - private Uri PrivacyPolicyUrl { - get { - return Url.ActionFull("PrivacyPolicy", "Home"); - } - } - - /// <summary> - /// Prepares a web page to help the user supply his login information. - /// </summary> - /// <returns>The action result.</returns> - public ActionResult LogOn() { - return View(); - } - - /// <summary> - /// Prepares a web page to help the user supply his login information. - /// </summary> - /// <returns>The action result.</returns> - public ActionResult LogOnPopUp() { - return View(); - } - - /// <summary> - /// Handles the positive assertion that comes from Providers to Javascript running in the browser. - /// </summary> - /// <returns>The action result.</returns> - /// <remarks> - /// This method instructs ASP.NET MVC to <i>not</i> validate input - /// because some OpenID positive assertions messages otherwise look like - /// hack attempts and result in errors when validation is turned on. - /// </remarks> - [AcceptVerbs(HttpVerbs.Get | HttpVerbs.Post), ValidateInput(false)] - public ActionResult PopUpReturnTo() { - return this.RelyingParty.ProcessAjaxOpenIdResponse(); - } - - /// <summary> - /// Handles the positive assertion that comes from Providers. - /// </summary> - /// <param name="openid_openidAuthData">The positive assertion obtained via AJAX.</param> - /// <returns>The action result.</returns> - /// <remarks> - /// This method instructs ASP.NET MVC to <i>not</i> validate input - /// because some OpenID positive assertions messages otherwise look like - /// hack attempts and result in errors when validation is turned on. - /// </remarks> - [AcceptVerbs(HttpVerbs.Post), ValidateInput(false)] - public ActionResult LogOnPostAssertion(string openid_openidAuthData) { - IAuthenticationResponse response; - if (!string.IsNullOrEmpty(openid_openidAuthData)) { - var auth = new Uri(openid_openidAuthData); - var headers = new WebHeaderCollection(); - foreach (string header in Request.Headers) { - headers[header] = Request.Headers[header]; - } - - // Always say it's a GET since the payload is all in the URL, even the large ones. - HttpRequestInfo clientResponseInfo = new HttpRequestInfo("GET", auth, auth.PathAndQuery, headers, null); - response = this.RelyingParty.GetResponse(clientResponseInfo); - } else { - response = this.RelyingParty.GetResponse(); - } - if (response != null) { - switch (response.Status) { - case AuthenticationStatus.Authenticated: - var token = RelyingPartyLogic.User.ProcessUserLogin(response); - this.FormsAuth.SignIn(token.ClaimedIdentifier, false); - string returnUrl = Request.Form["returnUrl"]; - if (!String.IsNullOrEmpty(returnUrl)) { - return Redirect(returnUrl); - } else { - return RedirectToAction("Index", "Home"); - } - case AuthenticationStatus.Canceled: - ModelState.AddModelError("OpenID", "It looks like you canceled login at your OpenID Provider."); - break; - case AuthenticationStatus.Failed: - ModelState.AddModelError("OpenID", response.Exception.Message); - break; - } - } - - // If we're to this point, login didn't complete successfully. - // Show the LogOn view again to show the user any errors and - // give another chance to complete login. - return View("LogOn"); - } - - /// <summary> - /// Logs the user out of the site and redirects the browser to our home page. - /// </summary> - /// <returns>The action result.</returns> - public ActionResult LogOff() { - this.FormsAuth.SignOut(); - return RedirectToAction("Index", "Home"); - } - - public ActionResult Discover(string identifier) { - if (!this.Request.IsAjaxRequest()) { - throw new InvalidOperationException(); - } - - return this.RelyingParty.AjaxDiscovery( - identifier, - Realm.AutoDetect, - Url.ActionFull("PopUpReturnTo"), - this.PrivacyPolicyUrl); - } - [Authorize] public ActionResult Edit() { return View(GetAccountInfoModel()); @@ -255,43 +111,6 @@ return PartialView("AuthorizedApps", GetAccountInfoModel()); } - [Authorize, AcceptVerbs(HttpVerbs.Get | HttpVerbs.Post)] - public ActionResult AddAuthenticationTokenReturnTo(string openid_identifier) { - var response = this.RelyingParty.GetResponse(); - if (response != null) { - switch (response.Status) { - case AuthenticationStatus.Authenticated: - Database.LoggedInUser.AuthenticationTokens.Add(new AuthenticationToken { - ClaimedIdentifier = response.ClaimedIdentifier, - FriendlyIdentifier = response.FriendlyIdentifierForDisplay, - }); - Database.DataContext.SaveChanges(); - break; - default: - break; - } - } - - return RedirectToAction("Edit"); - } - - [Authorize, AcceptVerbs(HttpVerbs.Post), ValidateAntiForgeryToken] - public ActionResult AddAuthenticationToken(string openid_identifier) { - Identifier userSuppliedIdentifier; - if (Identifier.TryParse(openid_identifier, out userSuppliedIdentifier)) { - try { - var request = this.RelyingParty.CreateRequest(userSuppliedIdentifier, Realm.AutoDetect, Url.ActionFull("AddAuthenticationTokenReturnTo"), this.PrivacyPolicyUrl); - return request.RedirectingResponse.AsActionResult(); - } catch (ProtocolException ex) { - ModelState.AddModelError("openid_identifier", ex); - } - } else { - ModelState.AddModelError("openid_identifier", "This doesn't look like a valid OpenID."); - } - - return View("Edit", GetAccountInfoModel()); - } - private static AccountInfoModel GetAccountInfoModel() { var authorizedApps = from token in Database.DataContext.IssuedTokens.OfType<IssuedAccessToken>() where token.User.UserId == Database.LoggedInUser.UserId |