1 files changed, 111 insertions, 0 deletions
diff --git a/src/DotNetOpenAuth.AspNet/Clients/OAuth/TwitterClient.cs b/src/DotNetOpenAuth.AspNet/Clients/OAuth/TwitterClient.cs
new file mode 100644
index 0000000..ceaffd4
--- /dev/null
+++ b/src/DotNetOpenAuth.AspNet/Clients/OAuth/TwitterClient.cs
@@ -0,0 +1,111 @@
+//-----------------------------------------------------------------------
+// <copyright file="TwitterClient.cs" company="Microsoft">
+//     Copyright (c) Microsoft. All rights reserved.
+// </copyright>
+//-----------------------------------------------------------------------
+
+namespace DotNetOpenAuth.AspNet.Clients {
+	using System;
+	using System.Collections.Generic;
+	using System.Diagnostics.CodeAnalysis;
+	using System.IO;
+	using System.Net;
+	using System.Xml.Linq;
+	using DotNetOpenAuth.Messaging;
+	using DotNetOpenAuth.OAuth;
+	using DotNetOpenAuth.OAuth.ChannelElements;
+	using DotNetOpenAuth.OAuth.Messages;
+
+	/// <summary>
+	/// Represents a Twitter client
+	/// </summary>
+	public class TwitterClient : OAuthClient {
+		#region Constants and Fields
+
+		/// <summary>
+		/// The description of Twitter's OAuth protocol URIs for use with their "Sign in with Twitter" feature.
+		/// </summary>
+		public static readonly ServiceProviderDescription TwitterServiceDescription = new ServiceProviderDescription {
+			RequestTokenEndpoint =
+				new MessageReceivingEndpoint(
+					"http://twitter.com/oauth/request_token",
+					HttpDeliveryMethods.GetRequest | HttpDeliveryMethods.AuthorizationHeaderRequest),
+			UserAuthorizationEndpoint =
+				new MessageReceivingEndpoint(
+					"http://twitter.com/oauth/authenticate",
+					HttpDeliveryMethods.GetRequest | HttpDeliveryMethods.AuthorizationHeaderRequest),
+			AccessTokenEndpoint =
+				new MessageReceivingEndpoint(
+					"http://twitter.com/oauth/access_token",
+					HttpDeliveryMethods.GetRequest | HttpDeliveryMethods.AuthorizationHeaderRequest),
+			TamperProtectionElements = new ITamperProtectionChannelBindingElement[] { new HmacSha1SigningBindingElement() },
+		};
+
+		#endregion
+
+		#region Constructors and Destructors
+
+		/// <summary>
+		/// Initializes a new instance of the <see cref="TwitterClient"/> class with the specified consumer key and consumer secret.
+		/// </summary>
+		/// <param name="consumerKey">
+		/// The consumer key. 
+		/// </param>
+		/// <param name="consumerSecret">
+		/// The consumer secret. 
+		/// </param>
+		[SuppressMessage("Microsoft.Reliability", "CA2000:Dispose objects before losing scope",
+			Justification = "We can't dispose the object because we still need it through the app lifetime.")]
+		public TwitterClient(string consumerKey, string consumerSecret)
+			: base("twitter", TwitterServiceDescription, consumerKey, consumerSecret) { }
+
+		#endregion
+
+		#region Methods
+
+		/// <summary>
+		/// Check if authentication succeeded after user is redirected back from the service provider.
+		/// </summary>
+		/// <param name="response">
+		/// The response token returned from service provider 
+		/// </param>
+		/// <returns>
+		/// Authentication result 
+		/// </returns>
+		[SuppressMessage("Microsoft.Design", "CA1031:DoNotCatchGeneralExceptionTypes",
+			Justification = "We don't care if the request for additional data fails.")]
+		protected override AuthenticationResult VerifyAuthenticationCore(AuthorizedTokenResponse response) {
+			string accessToken = response.AccessToken;
+			string userId = response.ExtraData["user_id"];
+			string userName = response.ExtraData["screen_name"];
+
+			var profileRequestUrl = new Uri("http://api.twitter.com/1/users/show.xml?user_id="
+									   + MessagingUtilities.EscapeUriDataStringRfc3986(userId));
+			var profileEndpoint = new MessageReceivingEndpoint(profileRequestUrl, HttpDeliveryMethods.GetRequest);
+			HttpWebRequest request = this.WebWorker.PrepareAuthorizedRequest(profileEndpoint, accessToken);
+
+			var extraData = new Dictionary<string, string>();
+			extraData.Add("accesstoken", accessToken);
+			try {
+				using (WebResponse profileResponse = request.GetResponse()) {
+					using (Stream responseStream = profileResponse.GetResponseStream()) {
+						XDocument document = XDocument.Load(responseStream);
+						extraData.AddDataIfNotEmpty(document, "name");
+						extraData.AddDataIfNotEmpty(document, "location");
+						extraData.AddDataIfNotEmpty(document, "description");
+						extraData.AddDataIfNotEmpty(document, "url");
+					}
+				}
+			} catch (Exception) {
+				// At this point, the authentication is already successful.
+				// Here we are just trying to get additional data if we can.
+				// If it fails, no problem.
+			}
+
+			return new AuthenticationResult(
+				isSuccessful: true, provider: this.ProviderName, providerUserId: userId, userName: userName, extraData: extraData);
+		}
+
+		#endregion
+	}
+}