Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Closes #356, Closes #357, Closes #358 | David Christiansen | 2015-01-04 | 1 | -0/+1 |
| | |||||
* | Lots of StyleCop fixes. | Andrew Arnott | 2013-03-26 | 1 | -1/+4 |
| | |||||
* | Many more unit test build fixes and product touch-ups. | Andrew Arnott | 2013-03-07 | 1 | -20/+37 |
| | |||||
* | Switched Channel to receiving messages via HttpRequestMessage as well. | Andrew Arnott | 2013-03-04 | 1 | -9/+4 |
| | |||||
* | Adds OpenID RP to WebAPI sample so it's a real login. | Andrew Arnott | 2013-03-03 | 1 | -0/+15 |
| | |||||
* | C# compiler warning fixes. | Andrew Arnott | 2013-02-10 | 1 | -3/+9 |
| | |||||
* | OAuth2.AuthorizationServer now builds. | Andrew Arnott | 2013-01-13 | 1 | -35/+12 |
| | |||||
* | Removes CLR4 compiler symbol. | Andrew Arnott | 2012-12-28 | 1 | -4/+0 |
| | |||||
* | Removes more remnants of Code Contracts. | Andrew Arnott | 2012-12-26 | 1 | -4/+0 |
| | |||||
* | Replaces DNOA's internal Requires class with Validation NuGet package. | Andrew Arnott | 2012-12-26 | 1 | -0/+1 |
| | |||||
* | Merge branch 'v4.1' | Andrew Arnott | 2012-12-02 | 1 | -0/+14 |
|\ | | | | | | | | | | | | | Conflicts: src/DotNetOpenAuth.OAuth2.ResourceServer/OAuth2/StandardAccessTokenAnalyzer.cs src/DotNetOpenAuth.Test/OAuth2/OAuth2TestBase.cs src/version.txt | ||||
| * | Adds AuthorizationServer.HandleTokenRequest(HttpRequestMessage) overload. | Andrew Arnott | 2012-11-10 | 1 | -0/+14 |
| | | | | | | | | Fixes #210 | ||||
* | | Adds AuthorizationServer.DecodeRefreshToken | Andrew Arnott | 2012-07-20 | 1 | -0/+19 |
|/ | | | | | | And a unit test. Fixes #182 | ||||
* | Authorization Server hosts now instantiate their own AccessTokens rather ↵ | Andrew Arnott | 2012-04-25 | 1 | -22/+23 |
| | | | | | | | than just parameters. AccessTokens are now serialized via a virtual method on that instance. Fixes #38, I think. | ||||
* | Fixes access denial errors from OAuth 2 resource servers so they include the ↵ | Andrew Arnott | 2012-04-22 | 1 | -0/+14 |
| | | | | | | required parameters in their WWW-Authenticate headers. Fixes #124 | ||||
* | Fixed HTTP Basic authentication for OAuth 2 clients so that it actually ↵ | Andrew Arnott | 2012-04-19 | 1 | -1/+1 |
| | | | | works in the sample. | ||||
* | Fixed up the configuration story for OAuth 2. | Andrew Arnott | 2012-04-18 | 1 | -19/+4 |
| | |||||
* | StyleCop cleanup, and reversal of some code changes that were no longer ↵ | Andrew Arnott | 2012-04-18 | 1 | -1/+9 |
| | | | | necessary. | ||||
* | We have HTTP Basic client authentication working now in OAuth 2. | Andrew Arnott | 2012-04-18 | 1 | -2/+28 |
| | |||||
* | Enables the authorization server to store arbitrary additional claims with ↵ | Andrew Arnott | 2012-04-14 | 1 | -0/+2 |
| | | | | | | the access token. Fixes #107 | ||||
* | Renamed IAuthorizationServer to IAuthorizationServerHost. | Andrew Arnott | 2012-04-08 | 1 | -3/+3 |
| | | | | To avoid confusion with the concrete class AuthorizationServer. | ||||
* | AccessToken is now a public class. | Andrew Arnott | 2012-04-01 | 1 | -1/+0 |
| | | | | | | | | | | | Resource Servers can now handle access tokens that are issued for a client's data (not a 3rd party resource owner's). Client Identifiers are no longer included in access tokens for unauthenticated clients. More work needed on IAccessTokenAnalyzer and the access token formatter. We need to generalize the serialization itself so folks can use JWT, etc. We also still need access token to have a host-defined map of claims. Fixes #104 Fixes #102 | ||||
* | Fixed missing username and lifetime in implicit access tokens. | Andrew Arnott | 2012-04-01 | 1 | -1/+2 |
| | |||||
* | Allows the authorization server to store merely the hashes of client secrets. | Andrew Arnott | 2012-04-01 | 1 | -1/+1 |
| | | | | Fixes #92 | ||||
* | Fixed inclusion of refresh token based on host policy. | Andrew Arnott | 2012-04-01 | 1 | -2/+1 |
| | |||||
* | Moved localizable strings into specific OAuth 2 assemblies. | Andrew Arnott | 2012-03-31 | 1 | -1/+1 |
| | |||||
* | Removed another auth server binding element. | Andrew Arnott | 2012-03-31 | 1 | -6/+29 |
| | |||||
* | Fixed a couple of failing unit tests. | Andrew Arnott | 2012-03-31 | 1 | -1/+1 |
| | |||||
* | Fixed up an authorization server's token endpoint to generate more accurate ↵ | Andrew Arnott | 2012-03-30 | 1 | -4/+4 |
| | | | | error messages. | ||||
* | Moved the code in AuthorizationCodeBindingElement into the ↵ | Andrew Arnott | 2012-03-29 | 1 | -1/+8 |
| | | | | AuthorizationServer class. | ||||
* | Fixed another failing unit test. | Andrew Arnott | 2012-03-18 | 1 | -1/+1 |
| | |||||
* | Redistributed OAuth2 code into their more specific assemblies. | Andrew Arnott | 2012-03-16 | 1 | -2/+1 |
| | |||||
* | Fixed StyleCop warnings. | Andrew Arnott | 2012-03-14 | 1 | -27/+27 |
| | |||||
* | Access token endpoint now can respond with appropriate errors. | Andrew Arnott | 2012-03-14 | 1 | -45/+23 |
| | |||||
* | Applied all the StyleCop fixes necessary by the StyleCop 4.7 upgrade. | Andrew Arnott | 2012-03-10 | 1 | -1/+1 |
| | |||||
* | Replaced API requirements for HttpRequestInfo with HttpRequestBase (new in ↵ | Andrew Arnott | 2012-03-05 | 1 | -3/+5 |
| | | | | | | .NET 3.5 SP1). This makes us more friendly to MVC as well as mock-based unit testing. | ||||
* | Split up end user authorization request message types between auth code and ↵ | Andrew Arnott | 2012-02-21 | 1 | -1/+1 |
| | | | | implicit. | ||||
* | Added scaffolding for OAuth2 unit tests and added the first test for client ↵ | Andrew Arnott | 2012-02-20 | 1 | -10/+3 |
| | | | | authorization. | ||||
* | Suppressed refresh tokens when client credentials are used to comply with ↵ | Andrew Arnott | 2012-02-16 | 1 | -0/+9 |
| | | | | OAuth 2.0 section 4.4.3. | ||||
* | Fixed many FxCop messages in OAuth2 assemblies. #68 | Andrew Arnott | 2012-02-09 | 1 | -0/+2 |
| | |||||
* | Updated all copyright notices to reflect copyright assignment to Outercurve. | Andrew Arnott | 2012-02-05 | 1 | -2/+2 |
| | | | | Fixes #66 | ||||
* | All product assemblies build without ccrewrite.exe now. | Andrew Arnott | 2011-09-18 | 1 | -9/+9 |
| | |||||
* | Broke out OAuth 2 into 4 separate assemblies. | Andrew Arnott | 2011-08-01 | 1 | -0/+258 |