1 files changed, 74 insertions, 0 deletions
diff --git a/src/DotNetOpenAuth.AspNet/Clients/OAuth/CookieOAuthTokenManager.cs b/src/DotNetOpenAuth.AspNet/Clients/OAuth/CookieOAuthTokenManager.cs
new file mode 100644
index 0000000..835b6f1
--- /dev/null
+++ b/src/DotNetOpenAuth.AspNet/Clients/OAuth/CookieOAuthTokenManager.cs
@@ -0,0 +1,74 @@
+using System.Web;
+using System.Web.Security;
+
+namespace DotNetOpenAuth.AspNet.Clients {
+
+	/// <summary>
+	/// Stores OAuth tokens in the current request's cookie.
+	/// </summary>
+	/// <remarks>
+	/// This class is different from the <see cref="AuthenticationOnlyCookieOAuthTokenManager"/> in that 
+	/// it also stores the access token after the authentication has succeeded.
+	/// </remarks>
+	public class CookieOAuthTokenManager : AuthenticationOnlyCookieOAuthTokenManager {
+		/// <summary>
+		/// Initializes a new instance of the <see cref="CookieOAuthTokenManager"/> class.
+		/// </summary>
+		public CookieOAuthTokenManager() {
+		}
+
+		/// <summary>
+		/// Initializes a new instance of the <see cref="CookieOAuthTokenManager"/> class.
+		/// </summary>
+		/// <param name="context">The current request context.</param>
+		public CookieOAuthTokenManager(HttpContextBase context)
+			: base(context) {
+		}
+
+		/// <summary>
+		/// Gets the token secret from the specified token.
+		/// </summary>
+		/// <param name="token">The token.</param>
+		/// <returns>
+		/// The token's secret
+		/// </returns>
+		public override string GetTokenSecret(string token) {
+			string secret = base.GetTokenSecret(token);
+			if (secret != null) {
+				return secret;
+			}
+
+			// The base class checks for cookies in the Request object. 
+			// Here we check in the Response object as well because we 
+			// may have set it earlier in the request life cycle.
+			HttpCookie cookie = this.Context.Response.Cookies[TokenCookieKey];
+			if (cookie == null || string.IsNullOrEmpty(cookie.Values[token])) {
+				return null;
+			}
+
+			secret = DecodeAndUnprotectToken(token, cookie.Values[token]);
+			return secret;
+		}
+
+		/// <summary>
+		/// Replaces the request token with access token.
+		/// </summary>
+		/// <param name="requestToken">The request token.</param>
+		/// <param name="accessToken">The access token.</param>
+		/// <param name="accessTokenSecret">The access token secret.</param>
+		public override void ReplaceRequestTokenWithAccessToken(string requestToken, string accessToken, string accessTokenSecret) {
+			var cookie = new HttpCookie(TokenCookieKey) {
+				HttpOnly = true
+			};
+
+			if (FormsAuthentication.RequireSSL) {
+				cookie.Secure = true;
+			}
+
+			var encryptedToken = ProtectAndEncodeToken(accessToken, accessTokenSecret);
+			cookie.Values[accessToken] = encryptedToken;
+
+			this.Context.Response.Cookies.Set(cookie);
+		}
+	}
+}
+\ No newline at end of file