summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Cleaned up all StyleCop and FxCop messages.Andrew Arnott2009-07-277-3/+15
|
* Suppressed the warning in the samples that .NET generates due to use of ↵Andrew Arnott2009-07-274-0/+12
| | | | HMAC-SHA384 and 512.
* Added commented out lines to add debugging helps to the ajax login control.Andrew Arnott2009-07-271-0/+4
|
* Added [Serializable] attributes to a few key classes.Andrew Arnott2009-07-244-0/+4
|
* Fixed the way we convert DateTimes to the zone we expect.Andrew Arnott2009-07-247-7/+32
|
* Fixed bug where RP was willing to perform discovery on an asserted HTTP ↵Andrew Arnott2009-07-014-2/+35
| | | | Identifier even with RequireSsl turned on.
* Incremented to version 3.0.4.Andrew Arnott2009-06-261-1/+1
|
* Fixed bug where indirect messages were not sent to the user agent with a ↵v3.0.3.9177Andrew Arnott2009-06-221-0/+1
| | | | Content-Type HTTP header.
* Indirect messages no longer display "Login in progress" buttons to the user ↵Andrew Arnott2009-06-221-1/+3
| | | | if javascript is enabled.
* Added Intellisense for .config files' DotNetOpenAuth sections.Andrew Arnott2009-06-224-3/+243
|
* Fixed problem where an unexpected version of log4net.dll in the Bin ↵Andrew Arnott2009-06-211-1/+5
| | | | | | directory would cause DNOA to fail to start. Logging is quietly disabled in that case now.
* Added request token TTL checking.Andrew Arnott2009-06-158-7/+84
| | | | Resolves Trac ticket #54.
* Merge branch 'oauth10a' into v3.0Andrew Arnott2009-06-1572-762/+4709
|\
| * Added deprecated method warning for DesktopConsumer.ProcessUserAuthorization ↵Andrew Arnott2009-06-151-0/+1
| | | | | | | | method.
| * Locked down contract for when tokens are not found.Andrew Arnott2009-06-095-36/+57
| |
| * Revised ServiceProviderDescription.Version to use ProtocolVersion instead of ↵Andrew Arnott2009-06-092-3/+10
| | | | | | | | Version.
| * Fixed bug where we were looking up access tokens as if they were request tokens.Andrew Arnott2009-06-092-12/+16
| |
| * Service Provider now rejects OAuth messages from consumers that are too old ↵Andrew Arnott2009-06-094-1/+22
| | | | | | | | to meet security requirements.
| * Added OAuth security settings configuration elements and runtime classes.Andrew Arnott2009-06-0912-0/+297
| | | | | | | | The SP security setting RequiredMinimumOAuthVersion is NOT yet supported.
| * Fixed a couple of small bugs.Andrew Arnott2009-06-092-2/+2
| |
| * Refactored OAuth service provider interfaces to better suite token and ↵Andrew Arnott2009-06-0821-205/+378
| | | | | | | | consumer queries.
| * OAuth SP now works with 1.0 Consumers correctly.Andrew Arnott2009-06-0824-89/+191
| |
| * Minor change to MessagingUtilities to avoid a merge conflict later.Andrew Arnott2009-06-071-1/+1
| |
| * Fixed anomaly in sample dbml file.Andrew Arnott2009-06-071-1/+1
| |
| * OAuthConsumerWpf now works with OAuth 1.0a as well.Andrew Arnott2009-06-075-42/+112
| |
| * OAuth SP and web consumer work under OAuth 1.0a.Andrew Arnott2009-06-074-4/+42
| |
| * Added a helper method so that SPs can generate their own verifier codes that ↵Andrew Arnott2009-06-0610-61/+225
| | | | | | | | comply with Consumer requirements.
| * Refactored where token manager integration occurs.Andrew Arnott2009-06-063-40/+29
| |
| * All unit tests pass.Andrew Arnott2009-06-067-79/+146
| |
| * Fixed some failing unit tests and some associated product bugs.Andrew Arnott2009-06-0611-28/+74
| |
| * Added tests for the UriOrOobEncoding class.Andrew Arnott2009-06-066-450/+524
| |
| * Initial change to comply with OAuth 1.0a.Andrew Arnott2009-06-0536-98/+2971
| | | | | | | | | | | | Still need to come up with a plan to handle Consumers without callback, including mobile and set-top devices with limited keyboards. No tests yet. Limited thought given so far to interoperability with 1.0 vs. 1.0a.
* | When 417 Expectation Failed errors come in, association attempts are retried ↵Andrew Arnott2009-06-152-0/+33
| | | | | | | | | | | | now. Resolves Trac ticket #82.
* | Fixed query string parsing bug in OpenIdAjaxTextBox.Andrew Arnott2009-06-151-2/+4
| |
* | ErrorUtilities.ThrowInternal now returns an exception type for easier C# ↵Andrew Arnott2009-06-152-11/+12
| | | | | | | | validation.
* | Added logging when 417 Expectation Continue is encountered.Andrew Arnott2009-06-151-0/+1
|/
* Fixed OpenIdAjaxTextBox favicon width when IE8 doesn't set the proportion ↵Andrew Arnott2009-06-041-0/+1
| | | | based on its height constraint.
* Fixed OpenIdAjaxTextBox checkid_immediate in IE8.Andrew Arnott2009-06-041-1/+1
|
* Fixes the missing OP favicon handling of the OpenIdAjaxTextBox.Andrew Arnott2009-06-041-1/+5
|
* Fixes for the OpenIdAjaxTextBox UI rendering issues on IE8.Andrew Arnott2009-06-043-2/+4
|
* Added Google Maps OAuth scope to application block.Andrew Arnott2009-06-041-0/+6
|
* Fixed OpenIdAjaxTextBox to skip requests that are canceled by a LoggingIn ↵Andrew Arnott2009-06-031-5/+9
| | | | event handler.
* Fixed OpenIdAjaxTextBox javascript bug that caused some postbacks to not fire.Andrew Arnott2009-06-031-2/+3
|
* Added configuration setting to turn off OpenID discovery caching.Andrew Arnott2009-06-032-2/+26
|
* Added Moq framework.Andrew Arnott2009-06-033-0/+3467
|
* Fixed HTML discovery to properly parse responses with content-type ↵Andrew Arnott2009-05-311-1/+1
| | | | application/xhtml+xml for XRDS LINK tags.
* Fixed HTML discovery bug that would cause an unhandled exception when LINK ↵Andrew Arnott2009-05-312-2/+18
| | | | tags don't contain a REL attribute.
* Enhanced logging of VerifyProtocol errors.Andrew Arnott2009-05-301-1/+11
|
* Fixed xml doc comments around Channel.ReadFromRequest<T>.Andrew Arnott2009-05-301-4/+4
|
* Fixed bug where ProviderEndpoint.SendResponse would not clear the pending ↵Andrew Arnott2009-05-291-1/+2
| | | | auth request.
* OAuth messages now only scrape the FORM data for ↵Andrew Arnott2009-05-291-2/+4
| | | | | | application/x-www-form-urlencoded HTTP requests. This fixes sending multipart POST messages (including images, for example).
* Moved magic uri-encoded string to a constant.Andrew Arnott2009-05-293-3/+9
|
* AX fetch response now accepts attribute values with count = 0.Andrew Arnott2009-05-241-2/+2
| | | | Resolves Trac issue 68.
* Updated to Code Contracts 1.2.20518.12, and fixed a couple of lingering ↵Andrew Arnott2009-05-214-3/+4
| | | | FxCop messages.
* vsmdi update.Andrew Arnott2009-05-211-457/+444
|
* Refactored InfoCard SupportingScript.js.Andrew Arnott2009-05-212-106/+106
|
* "ineffectual" javascript adjustments to infocard selector.Andrew Arnott2009-05-212-403/+416
|
* Fixed javascript bug in sample OP's unsolicited assertion page.Andrew Arnott2009-05-201-0/+2
|
* FxCop now runs clean in v3.0 branch.Andrew Arnott2009-05-203-0/+5
|
* Fixed StyleCop messages.Andrew Arnott2009-05-202-3/+3
|
* Removed Contracts.ForAll reference since it keeps a runtime dependency to ↵Andrew Arnott2009-05-181-1/+1
| | | | Microsoft.Contracts.dll
* FxCop and CC fixes.Andrew Arnott2009-05-186-3/+29
|
* Test runs more resilient to race conditions.Andrew Arnott2009-05-161-0/+17
|
* Updated OpenIdRelyingPartyMvc sample's web.config file to be compliant with ↵Andrew Arnott2009-05-141-25/+27
| | | | shipping version of ASP.NET MVC.
* Added uri section declaration to web.config files of a few samples.Andrew Arnott2009-05-133-0/+3
|
* Removed unused UntrustedWebRequestHandler.DefaultCachePolicy field.Andrew Arnott2009-05-131-5/+0
| | | | It was causing problems with mono anyway.
* Removed unneeded catch in sample.Andrew Arnott2009-05-111-5/+0
|
* Fixes OpenID and OAuth URL data string encoding to follow RFC 3986 instead ↵Andrew Arnott2009-05-117-57/+120
| | | | | | of RFC 2396. While this probably won't fix any interop issues with OpenID, it IS anticipated to fix interop issues with OAuth since the generated signature base string will be different if any of these symbols show up in the string: !*'()
* Made sure that IDN and IRI URI mode are turned on for all sample sites, and ↵Andrew Arnott2009-05-097-79/+130
| | | | added a comment indicating their importance for all web sites that use this library.
* Moved "dnoa." prefix into a centralized constant.Andrew Arnott2009-05-086-7/+12
|
* Changed the custom RP parameter prefix from "dnoi." to "dnoa."Andrew Arnott2009-05-085-7/+7
|
* Added MessagePart members to custom extension sample.Andrew Arnott2009-05-072-2/+8
|
* StyleCop fixAndrew Arnott2009-05-071-1/+1
|
* Made IMessagePartEncoder public.Andrew Arnott2009-05-071-1/+1
|
* Fixed InfoCardSelector.Issuer property so that setting it to the empty ↵Andrew Arnott2009-05-051-7/+1
| | | | string prevents rendering the param tag.
* Fixed bug where Authorization header POST requests would fail because of a ↵Andrew Arnott2009-05-041-4/+10
| | | | missing Content-Length HTTP header.
* Incremented version to v3.0.3.Andrew Arnott2009-05-021-1/+1
|
* Simplified two calls into one call to send an OAuth-authorized request with ↵v3.0.2.9122Andrew Arnott2009-05-011-21/+49
| | | | extra data.
* StyleCop fixes.Andrew Arnott2009-04-3010-47/+50
|
* Revised OAuth channel to better support different combinations of HTTP methods.Andrew Arnott2009-04-309-91/+204
|
* Added more tests to verify correct behavior of OAuth Authorization header ↵Andrew Arnott2009-04-303-14/+99
| | | | | | and message parts in different places. Fixed a bug in the signature construction process the test found.
* Revert "Fixed OAuth authorization header handler to use POST requests where ↵Andrew Arnott2009-04-301-4/+0
| | | | | | | | necessary." This reverts commit 0a3e7432b58f52072159356576a905c2217c55a0. The solution I had checked in before was an incomplete solution to the problem.
* Further fixed base signature string construction and added several tests for it.Andrew Arnott2009-04-303-5/+35
|
* Fixes OAuth base signature string construction for URLs that include a ↵Andrew Arnott2009-04-292-2/+26
| | | | | | query-string part. Fixes Trac ticket 42.
* Added a bunch more Google Scopes to the application block.Andrew Arnott2009-04-291-2/+68
|
* Added XSS protection to OAuth SP sample.Andrew Arnott2009-04-292-0/+21
| | | | Resolves Trac ticket 43.
* Fixed OAuth authorization header handler to use POST requests where necessary.Andrew Arnott2009-04-291-0/+4
|
* Reformatted the assoc_handle values generated by OPs.Andrew Arnott2009-04-281-2/+9
| | | | No practical reason for this change. But just to exercise DNOA's uniqueness.
* Fixed OP interop bug with some 1.0 RPs that omitted the openid.session_type ↵Andrew Arnott2009-04-281-1/+1
| | | | parameter instead of including an empty one.
* Incremented version to v3.0.2.Andrew Arnott2009-04-271-1/+1
|
* Fixed StyleCop message.v3.0.1.9115Andrew Arnott2009-04-251-1/+1
|
* Fixed the namespace of a unit test class.Andrew Arnott2009-04-252-72/+74
|
* Incremented version to v3.0.1Andrew Arnott2009-04-251-1/+1
|
* Added OAuth ServiceProvider method for responding to the consumer's ↵Andrew Arnott2009-04-251-5/+27
| | | | authorization request using a predefined callback URI rather than the one in the message.
* OAuth SP sample now correctly sets the ConsumerLabel field in the authorize ↵Andrew Arnott2009-04-252-0/+15
| | | | page.
* Updated Code Contracts to 1.1.20415.13.Andrew Arnott2009-04-243-750/+1
| | | | This CC version introduces a bug where having Microsoft.Contracts.dll in the assembly search path (lib) causes ccrewrite.exe to spin forever. So we're removing it from that directory, and building will require having Code Contracts installed on the computer.
* Turned off runtime contract checking until ccrewrite.exe gets fixed so it ↵Andrew Arnott2009-04-242-1/+3
| | | | doesn't hang.
* build.proj "enhancement -- nothing more" - Binars.Andrew Arnott2009-04-221-9/+19
|
* Fixed build warning regarding .refresh files.Andrew Arnott2009-04-224-0/+6
|
* Fixed Identifier.TryParse to not throw when passed null or empty string values.Andrew Arnott2009-04-172-1/+21
| | | | Fixes Trac issue 15.