2 files changed, 5 insertions, 18 deletions
diff --git a/samples/OAuth2ProtectedWebApi/Code/AuthorizationServerHost.cs b/samples/OAuth2ProtectedWebApi/Code/AuthorizationServerHost.cs
index 73c5864..3149923 100644
--- a/samples/OAuth2ProtectedWebApi/Code/AuthorizationServerHost.cs
+++ b/samples/OAuth2ProtectedWebApi/Code/AuthorizationServerHost.cs
@@ -12,14 +12,15 @@
 	public class AuthorizationServerHost : IAuthorizationServerHost {
 		private static ICryptoKeyStore cryptoKeyStore = MemoryCryptoKeyStore.Instance;
 
-		private static INonceStore nonceStore = new MemoryNonceStore();
-
 		public ICryptoKeyStore CryptoKeyStore {
 			get { return cryptoKeyStore; }
 		}
 
 		public INonceStore NonceStore {
-			get { return nonceStore; }
+			get {
+				// Implementing a nonce store is a good idea as it mitigates replay attacks.
+				return null;
+			}
 		}
 
 		public AccessTokenResult CreateAccessToken(IAccessTokenRequest accessTokenRequestMessage) {
@@ -31,7 +32,7 @@
 		}
 
 		public IClientDescription GetClient(string clientIdentifier) {
-			return new ClientDescription("zzz", new Uri("http://www.microsoft.com/en-us/default.aspx"), ClientType.Confidential);
+			return new ClientDescription("b", new Uri("http://www.microsoft.com/en-us/default.aspx"), ClientType.Confidential);
 		}
 
 		public bool IsAuthorizationValid(IAuthorizationDescription authorization) {
diff --git a/samples/OAuth2ProtectedWebApi/Code/MemoryNonceStore.cs b/samples/OAuth2ProtectedWebApi/Code/MemoryNonceStore.cs
deleted file mode 100644
index 3bec259..0000000
--- a/samples/OAuth2ProtectedWebApi/Code/MemoryNonceStore.cs
+++ /dev/null
@@ -1,14 +0,0 @@
-namespace OAuth2ProtectedWebApi.Code {
-	using System;
-	using System.Collections.Generic;
-	using System.Linq;
-	using System.Web;
-
-	using DotNetOpenAuth.Messaging.Bindings;
-
-	internal class MemoryNonceStore : INonceStore {
-		public bool StoreNonce(string context, string nonce, DateTime timestampUtc) {
-			return true;
-		}
-	}
-}
-\ No newline at end of file