1 files changed, 38 insertions, 0 deletions
diff --git a/samples/DotNetOpenAuth.ApplicationBlock/Provider/AuthenticationRequestExtensions.cs b/samples/DotNetOpenAuth.ApplicationBlock/Provider/AuthenticationRequestExtensions.cs
new file mode 100644
index 0000000..a737d30
--- /dev/null
+++ b/samples/DotNetOpenAuth.ApplicationBlock/Provider/AuthenticationRequestExtensions.cs
@@ -0,0 +1,38 @@
+namespace DotNetOpenAuth.ApplicationBlock.Provider {
+	using System;
+	using DotNetOpenAuth.OpenId;
+	using DotNetOpenAuth.OpenId.Provider;
+
+	public static class AuthenticationRequestExtensions {
+		/// <summary>
+		/// Removes all personally identifiable information from the positive assertion.
+		/// </summary>
+		/// <param name="request">The incoming authentication request.</param>
+		/// <param name="localIdentifier">The OP local identifier, before the anonymous hash is applied to it.</param>
+		/// <param name="anonymousIdentifierProvider">The anonymous identifier provider.</param>
+		/// <param name="pairwiseUnique">if set to <c>true</c> the anonymous identifier will be unique to the requesting relying party's realm.</param>
+		/// <remarks>
+		/// The openid.claimed_id and openid.identity values are hashed.
+		/// </remarks>
+		public static void ScrubPersonallyIdentifiableInformation(this IAuthenticationRequest request, Identifier localIdentifier, AnonymousIdentifierProviderBase anonymousIdentifierProvider, bool pairwiseUnique) {
+			if (request == null) {
+				throw new ArgumentNullException("request");
+			}
+			if (!request.IsDirectedIdentity) {
+				throw new InvalidOperationException("This operation is supported only under identifier select (directed identity) scenarios.");
+			}
+			if (anonymousIdentifierProvider == null) {
+				throw new ArgumentNullException("anonymousIdentifierProvider");
+			}
+			if (localIdentifier == null) {
+				throw new ArgumentNullException("localIdentifier");
+			}
+
+			// When generating the anonymous identifiers, the openid.identity and openid.claimed_id
+			// will always end up with matching values.
+			var anonymousIdentifier = anonymousIdentifierProvider.GetAnonymousIdentifier(localIdentifier, pairwiseUnique ? request.Realm : null);
+			request.ClaimedIdentifier = anonymousIdentifier;
+			request.LocalIdentifier = anonymousIdentifier;
+		}
+	}
+}