summaryrefslogtreecommitdiffstats
path: root/src/DotNetOpenAuth.OAuth2/OAuth2/StandardAccessTokenAnalyzer.cs
diff options
context:
space:
mode:
Diffstat (limited to 'src/DotNetOpenAuth.OAuth2/OAuth2/StandardAccessTokenAnalyzer.cs')
-rw-r--r--src/DotNetOpenAuth.OAuth2/OAuth2/StandardAccessTokenAnalyzer.cs66
1 files changed, 0 insertions, 66 deletions
diff --git a/src/DotNetOpenAuth.OAuth2/OAuth2/StandardAccessTokenAnalyzer.cs b/src/DotNetOpenAuth.OAuth2/OAuth2/StandardAccessTokenAnalyzer.cs
deleted file mode 100644
index 636f490..0000000
--- a/src/DotNetOpenAuth.OAuth2/OAuth2/StandardAccessTokenAnalyzer.cs
+++ /dev/null
@@ -1,66 +0,0 @@
-//-----------------------------------------------------------------------
-// <copyright file="StandardAccessTokenAnalyzer.cs" company="Outercurve Foundation">
-// Copyright (c) Outercurve Foundation. All rights reserved.
-// </copyright>
-//-----------------------------------------------------------------------
-
-namespace DotNetOpenAuth.OAuth2 {
- using System;
- using System.Collections.Generic;
- using System.Diagnostics.Contracts;
- using System.Security.Cryptography;
- using DotNetOpenAuth.Messaging;
- using DotNetOpenAuth.OAuth2.ChannelElements;
-
- /// <summary>
- /// An access token reader that understands DotNetOpenAuth authorization server issued tokens.
- /// </summary>
- public class StandardAccessTokenAnalyzer : IAccessTokenAnalyzer {
- /// <summary>
- /// Initializes a new instance of the <see cref="StandardAccessTokenAnalyzer"/> class.
- /// </summary>
- /// <param name="authorizationServerPublicSigningKey">The crypto service provider with the authorization server public signing key.</param>
- /// <param name="resourceServerPrivateEncryptionKey">The crypto service provider with the resource server private encryption key.</param>
- public StandardAccessTokenAnalyzer(RSACryptoServiceProvider authorizationServerPublicSigningKey, RSACryptoServiceProvider resourceServerPrivateEncryptionKey) {
- Requires.NotNull(authorizationServerPublicSigningKey, "authorizationServerPublicSigningKey");
- Requires.NotNull(resourceServerPrivateEncryptionKey, "resourceServerPrivateEncryptionKey");
- Requires.True(!resourceServerPrivateEncryptionKey.PublicOnly, "resourceServerPrivateEncryptionKey");
- this.AuthorizationServerPublicSigningKey = authorizationServerPublicSigningKey;
- this.ResourceServerPrivateEncryptionKey = resourceServerPrivateEncryptionKey;
- }
-
- /// <summary>
- /// Gets the authorization server public signing key.
- /// </summary>
- /// <value>The authorization server public signing key.</value>
- public RSACryptoServiceProvider AuthorizationServerPublicSigningKey { get; private set; }
-
- /// <summary>
- /// Gets the resource server private encryption key.
- /// </summary>
- /// <value>The resource server private encryption key.</value>
- public RSACryptoServiceProvider ResourceServerPrivateEncryptionKey { get; private set; }
-
- /// <summary>
- /// Reads an access token to find out what data it authorizes access to.
- /// </summary>
- /// <param name="message">The message carrying the access token.</param>
- /// <param name="accessToken">The access token.</param>
- /// <param name="user">The user whose data is accessible with this access token.</param>
- /// <param name="scope">The scope of access authorized by this access token.</param>
- /// <returns>
- /// A value indicating whether this access token is valid.
- /// </returns>
- /// <remarks>
- /// This method also responsible to throw a <see cref="ProtocolException"/> or return
- /// <c>false</c> when the access token is expired, invalid, or from an untrusted authorization server.
- /// </remarks>
- public virtual bool TryValidateAccessToken(IDirectedProtocolMessage message, string accessToken, out string user, out HashSet<string> scope) {
- var accessTokenFormatter = AccessToken.CreateFormatter(this.AuthorizationServerPublicSigningKey, this.ResourceServerPrivateEncryptionKey);
- var token = accessTokenFormatter.Deserialize(message, accessToken, Protocol.access_token);
- user = token.User;
- scope = new HashSet<string>(token.Scope, OAuthUtilities.ScopeStringComparer);
- return true;
- }
- }
-}