Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Corrected indentation back to being tab based. | Richard Collette | 2014-12-26 | 1 | -67/+67 |
| | |||||
* | Undo CodeMaid formatting | Richard Collette | 2014-12-23 | 1 | -29/+18 |
| | |||||
* | Fix #355 Response.ContentType not set when AsActionResult is used. | Richard Collette | 2014-12-18 | 1 | -83/+97 |
| | |||||
* | Removed references to obsolete AsyncController. | Andrew Arnott | 2013-01-27 | 1 | -1/+1 |
| | |||||
* | Fixed a bunch more samples. | Andrew Arnott | 2013-01-23 | 1 | -11/+13 |
| | |||||
* | Access token endpoint now can respond with appropriate errors. | Andrew Arnott | 2012-03-14 | 1 | -6/+1 |
| | |||||
* | Fixed StyleCop mesage. | Andrew Arnott | 2012-03-01 | 1 | -1/+1 |
| | |||||
* | Slightly simplified sample OAuth 2 authorization server token endpoint action. | Andrew Arnott | 2012-02-25 | 1 | -6/+4 |
| | |||||
* | Added another frame busting technique to make the authorization server more ↵ | Andrew Arnott | 2012-02-20 | 1 | -0/+1 |
| | | | | secure. | ||||
* | Access token lifetimes are now controlled by the IAuthorizationServer ↵ | Andrew Arnott | 2011-06-16 | 1 | -11/+1 |
| | | | | | | instance supplied by the host. It is consistent whether the access token is obtained via implicit grant or from a refresh token. | ||||
* | Implicit grants are now sort of working on the authorization server side. | unknown | 2011-06-15 | 1 | -32/+2 |
| | | | | | | Still to do: * Ensure no auto-authorize of access tokens based on previous authorizations for the unauthenticated client. * Provide the authorization server with a way to indicate access token lifetime, and to veto the request based on the requested scopes being too dangerous for the less secure implicit grant type. | ||||
* | Various fixes to the sample OAuth 2.0 Authorization Server sample. | Andrew Arnott | 2011-05-27 | 1 | -0/+1 |
| | |||||
* | Allowed for cycling of symmetric cryptographic keys by replacing the ↵ | Andrew Arnott | 2011-05-27 | 1 | -10/+10 |
| | | | | | | effectively constant byte[] secret with a new ICryptoKeyStore throughout the OAuth 2 and OpenID stacks. And StyleCop fixes. | ||||
* | Fixed static field initialization. | Andrew Arnott | 2011-04-07 | 1 | -13/+6 |
| | |||||
* | Fixed non-thread-safe use of RsaCryptoServiceProvider instances. | Andrew Arnott | 2011-04-07 | 1 | -5/+11 |
| | |||||
* | Replaced OAuth2 API demands for RSAParameters with demands for ↵ | Andrew Arnott | 2011-04-06 | 1 | -103/+116 |
| | | | | | | | | RSACryptoServiceProvider. This allows for servers that have non-exportable private keys to still use those private keys for signing and decryption. Closes #16 | ||||
* | Now StyleCop clean. | Andrew Arnott | 2010-08-01 | 1 | -16/+26 |
| | |||||
* | Some user-notification enhancements to the OAuth 2 samples. | Andrew Arnott | 2010-08-01 | 1 | -1/+15 |
| | |||||
* | The OAuthClient, OAuthResourceServer and OAuthAuthorizationServer samples ↵ | Andrew Arnott | 2010-08-01 | 1 | -2/+1 |
| | | | | now work! | ||||
* | Split the OAuthServiceProvider sample into two samples: ↵ | Andrew Arnott | 2010-07-31 | 1 | -0/+102 |
OAuthAuthorizationServer and OAuthResourceServer. Renamed OAuthConsumer to OAuthClient. |