diff options
Diffstat (limited to 'samples/OAuthAuthorizationServer/Views/OAuth/Authorize.aspx')
| -rw-r--r-- | samples/OAuthAuthorizationServer/Views/OAuth/Authorize.aspx | 65 |
1 files changed, 65 insertions, 0 deletions
diff --git a/samples/OAuthAuthorizationServer/Views/OAuth/Authorize.aspx b/samples/OAuthAuthorizationServer/Views/OAuth/Authorize.aspx new file mode 100644 index 0000000..7f067a8 --- /dev/null +++ b/samples/OAuthAuthorizationServer/Views/OAuth/Authorize.aspx @@ -0,0 +1,65 @@ +<%@ Page Language="C#" Inherits="System.Web.Mvc.ViewPage<OAuthAuthorizationServer.Models.AccountAuthorizeModel>" %> +<%@ Import Namespace="DotNetOpenAuth.OAuth2" %> + +<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> + +<html xmlns="http://www.w3.org/1999/xhtml"> +<head runat="server"> + <title></title> +</head> +<body> + <h2> + Authorize + </h2> + <div style="background-color: Yellow"> + <b>Warning</b>: Never give your login credentials to another web site or application. + </div> + <p> + The + <%= Html.Encode(Model.ClientApp) %> + application is requesting to access the private data in your account here. Is that + alright with you? + </p> + <p> + <b>Requested access: </b> + <%= Html.Encode(String.Join(" ", Model.Scope.ToArray())) %> + </p> + <p> + If you grant access now, you can revoke it at any time by returning to + <%= Html.ActionLink("your account page", "Edit") %>. + </p> + <% using (Html.BeginForm("AuthorizeResponse", "OAuth")) { %> + <%= Html.AntiForgeryToken() %> + <%= Html.Hidden("IsApproved") %> + <%= Html.Hidden("client_id", Model.AuthorizationRequest.ClientIdentifier) %> + <%= Html.Hidden("redirect_uri", Model.AuthorizationRequest.Callback) %> + <%= Html.Hidden("state", Model.AuthorizationRequest.ClientState) %> + <%= Html.Hidden("scope", OAuthUtilities.JoinScopes(Model.AuthorizationRequest.Scope)) %> + <%= Html.Hidden("response_type", "code") %> + <div style="display: none" id="responseButtonsDiv"> + <input type="submit" value="Yes" onclick="document.getElementsByName('IsApproved')[0].value = true; return true;" /> + <input type="submit" value="No" onclick="document.getElementsByName('IsApproved')[0].value = false; return true;" /> + </div> + <div id="javascriptDisabled"> + <b>Javascript appears to be disabled in your browser. </b>This page requires Javascript + to be enabled to better protect your security. + </div> + + <script language="javascript" type="text/javascript"> + //<![CDATA[ + // we use HTML to hide the action buttons and Javascript to show them + // to protect against click-jacking in an iframe whose javascript is disabled. + document.getElementById('responseButtonsDiv').style.display = 'block'; + document.getElementById('javascriptDisabled').style.display = 'none'; + + // Frame busting code (to protect us from being hosted in an iframe). + // This protects us from click-jacking. + if (document.location !== window.top.location) { + window.top.location = document.location; + } + //]]> + </script> + + <% } %> +</body> +</html> |