1 files changed, 126 insertions, 0 deletions
diff --git a/src/DotNetOpenAuth.AspNet/OpenAuthAuthenticationTicketHelper.cs b/src/DotNetOpenAuth.AspNet/OpenAuthAuthenticationTicketHelper.cs
new file mode 100644
index 0000000..3fc3a21
--- /dev/null
+++ b/src/DotNetOpenAuth.AspNet/OpenAuthAuthenticationTicketHelper.cs
@@ -0,0 +1,126 @@
+//-----------------------------------------------------------------------
+// <copyright file="OpenAuthAuthenticationTicketHelper.cs" company="Microsoft">
+//     Copyright (c) Microsoft. All rights reserved.
+// </copyright>
+//-----------------------------------------------------------------------
+
+namespace DotNetOpenAuth.AspNet {
+	using System;
+	using System.Diagnostics;
+	using System.Web;
+	using System.Web.Security;
+
+	/// <summary>
+	/// Helper methods for setting and retrieving a custom forms authentication ticket for delegation protocols.
+	/// </summary>
+	internal static class OpenAuthAuthenticationTicketHelper {
+		#region Constants and Fields
+
+		/// <summary>
+		/// The open auth cookie token.
+		/// </summary>
+		private const string OpenAuthCookieToken = "OAuth";
+
+		#endregion
+
+		#region Public Methods and Operators
+
+		/// <summary>
+		/// Checks whether the specified HTTP request comes from an authenticated user.
+		/// </summary>
+		/// <param name="context">
+		/// The context.
+		/// </param>
+		/// <returns>True if the reuest is authenticated; false otherwise.</returns>
+		public static bool IsValidAuthenticationTicket(HttpContextBase context) {
+			HttpCookie cookie = context.Request.Cookies[FormsAuthentication.FormsCookieName];
+			if (cookie == null) {
+				return false;
+			}
+
+			string encryptedCookieData = cookie.Value;
+			if (string.IsNullOrEmpty(encryptedCookieData)) {
+				return false;
+			}
+
+			try {
+				FormsAuthenticationTicket authTicket = FormsAuthentication.Decrypt(encryptedCookieData);
+				return authTicket != null && !authTicket.Expired && authTicket.UserData == OpenAuthCookieToken;
+			} catch (ArgumentException) {
+				return false;
+			}
+		}
+
+		/// <summary>
+		/// Adds an authentication cookie to the user agent in the next HTTP response.
+		/// </summary>
+		/// <param name="context">
+		/// The context.
+		/// </param>
+		/// <param name="userName">
+		/// The user name.
+		/// </param>
+		/// <param name="createPersistentCookie">
+		/// A value indicating whether the cookie should persist across sessions.
+		/// </param>
+		public static void SetAuthenticationTicket(HttpContextBase context, string userName, bool createPersistentCookie) {
+			if (!context.Request.IsSecureConnection && FormsAuthentication.RequireSSL) {
+				throw new HttpException(WebResources.ConnectionNotSecure);
+			}
+
+			HttpCookie cookie = GetAuthCookie(userName, createPersistentCookie);
+			context.Response.Cookies.Add(cookie);
+		}
+
+		#endregion
+
+		#region Methods
+
+		/// <summary>
+		/// Creates an HTTP authentication cookie.
+		/// </summary>
+		/// <param name="userName">
+		/// The user name.
+		/// </param>
+		/// <param name="createPersistentCookie">
+		/// A value indicating whether the cookie should last across sessions.
+		/// </param>
+		/// <returns>An authentication cookie.</returns>
+		private static HttpCookie GetAuthCookie(string userName, bool createPersistentCookie) {
+			Requires.NotNullOrEmpty(userName, "userName");
+
+			var ticket = new FormsAuthenticationTicket(
+				/* version */
+				2,
+				userName,
+				DateTime.Now,
+				DateTime.Now.Add(FormsAuthentication.Timeout),
+				createPersistentCookie,
+				OpenAuthCookieToken,
+				FormsAuthentication.FormsCookiePath);
+
+			string encryptedTicket = FormsAuthentication.Encrypt(ticket);
+			if (encryptedTicket == null || encryptedTicket.Length < 1) {
+				throw new HttpException(WebResources.FailedToEncryptTicket);
+			}
+
+			var cookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket) {
+				HttpOnly = true,
+				Path = FormsAuthentication.FormsCookiePath,
+				Secure = FormsAuthentication.RequireSSL
+			};
+
+			if (FormsAuthentication.CookieDomain != null) {
+				cookie.Domain = FormsAuthentication.CookieDomain;
+			}
+
+			if (ticket.IsPersistent) {
+				cookie.Expires = ticket.Expiration;
+			}
+
+			return cookie;
+		}
+
+		#endregion
+	}
+}