DotNetOpenAuth - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Age	Files	Lines
*	Corrected indentation back to being tab based.	Richard Collette	2014-12-26	2	-118/+117
\|
*	Undo CodeMaid formatting	Richard Collette	2014-12-23	2	-63/+37
\|
*	Fix #355 Response.ContentType not set when AsActionResult is used.	Richard Collette	2014-12-18	2	-152/+183
\|
*	Removes some optional cancellation tokens that don't work with all server ↵	Andrew Arnott	2013-03-28	1	-3/+3
\| \| \| \|	configurations.
*	Removed references to obsolete AsyncController.	Andrew Arnott	2013-01-27	2	-2/+2
\|
*	Fixed a bunch more samples.	Andrew Arnott	2013-01-23	2	-19/+21
\|
*	Incremented the OAuth 2.0 client sample's port # so as to not conflict with ↵	Andrew Arnott	2012-03-22	1	-1/+1
\| \| \| \|	the OAuth 1.0 consumer sample.
*	Access token endpoint now can respond with appropriate errors.	Andrew Arnott	2012-03-14	1	-6/+1
\|
*	Fixed StyleCop mesage.	Andrew Arnott	2012-03-01	1	-1/+1
\|
*	Slightly simplified sample OAuth 2 authorization server token endpoint action.	Andrew Arnott	2012-02-25	1	-6/+4
\|
*	Added another frame busting technique to make the authorization server more ↵	Andrew Arnott	2012-02-20	1	-0/+1
\| \| \| \|	secure.
*	We have an implicit grant javascript client that can obtain an access token.	Andrew Arnott	2011-06-20	1	-0/+5
\| \| \| \|	It doesn't know how to use it yet though.
*	Access token lifetimes are now controlled by the IAuthorizationServer ↵	Andrew Arnott	2011-06-16	1	-11/+1
\| \| \| \| \| \|	instance supplied by the host. It is consistent whether the access token is obtained via implicit grant or from a refresh token.
*	Implicit grants are now sort of working on the authorization server side.	unknown	2011-06-15	1	-32/+2
\| \| \| \| \| \|	Still to do: * Ensure no auto-authorize of access tokens based on previous authorizations for the unauthenticated client. * Provide the authorization server with a way to indicate access token lifetime, and to veto the request based on the requested scopes being too dangerous for the less secure implicit grant type.
*	Various fixes to the sample OAuth 2.0 Authorization Server sample.	Andrew Arnott	2011-05-27	2	-1/+6
\|
*	Allowed for cycling of symmetric cryptographic keys by replacing the ↵	Andrew Arnott	2011-05-27	1	-10/+10
\| \| \| \| \| \|	effectively constant byte[] secret with a new ICryptoKeyStore throughout the OAuth 2 and OpenID stacks. And StyleCop fixes.
*	Fixed static field initialization.	Andrew Arnott	2011-04-07	1	-13/+6
\|
*	Fixed non-thread-safe use of RsaCryptoServiceProvider instances.	Andrew Arnott	2011-04-07	1	-5/+11
\|
*	Replaced OAuth2 API demands for RSAParameters with demands for ↵	Andrew Arnott	2011-04-06	1	-103/+116
\| \| \| \| \| \| \| \|	RSACryptoServiceProvider. This allows for servers that have non-exportable private keys to still use those private keys for signing and decryption. Closes #16
*	Removed database component from the Resource Server sample.	Andrew Arnott	2010-08-11	2	-5/+12
\|
*	Fixed bug where sample logon page would throw due to no returnUrl parameter.	Andrew Arnott	2010-08-11	1	-14/+17
\|
*	Non-functional cleanup.	Andrew Arnott	2010-08-11	1	-10/+10
\|
*	Now StyleCop clean.	Andrew Arnott	2010-08-01	3	-53/+49
\|
*	Some user-notification enhancements to the OAuth 2 samples.	Andrew Arnott	2010-08-01	1	-1/+15
\|
*	The OAuthClient, OAuthResourceServer and OAuthAuthorizationServer samples ↵	Andrew Arnott	2010-08-01	3	-95/+39
\| \| \| \|	now work!
*	Split the OAuthServiceProvider sample into two samples: ↵	Andrew Arnott	2010-07-31	3	-0/+289
	OAuthAuthorizationServer and OAuthResourceServer. Renamed OAuthConsumer to OAuthClient.