summaryrefslogtreecommitdiffstats
path: root/src/DotNetOpenAuth.OAuth2/OAuth2/AccessToken.cs
Commit message (Collapse)AuthorAgeFilesLines
* Removes inappropriate input validation of the signingKey argument in the ↵Andrew Arnott2013-12-031-2/+0
| | | | | | | | AccessToken.CreateFormatter method. This was breaking ResourceServer scenarios where the ResourceServer did not have the authorization server's private signing key. Fixes #298
* Lots of StyleCop fixes.Andrew Arnott2013-03-261-1/+4
|
* Adds support for symmetric key signing and encryption of access tokens.Andrew Arnott2013-03-011-0/+9
| | | | This targets the common scenario where authorization servers and resource servers are actually on the same web application, and asymmetric cryptography is overkill and requires extra setup.
* Fixes the 16 failing unit tests.Andrew Arnott2012-12-271-1/+0
|
* Removes more remnants of Code Contracts.Andrew Arnott2012-12-261-5/+2
|
* Replaces DNOA's internal Requires class with Validation NuGet package.Andrew Arnott2012-12-261-0/+1
|
* Authorization Server hosts now instantiate their own AccessTokens rather ↵Andrew Arnott2012-04-251-24/+45
| | | | | | | than just parameters. AccessTokens are now serialized via a virtual method on that instance. Fixes #38, I think.
* Fixed C# warning.Andrew Arnott2012-04-041-1/+1
|
* AccessToken is now a public class.Andrew Arnott2012-04-011-0/+104
Resource Servers can now handle access tokens that are issued for a client's data (not a 3rd party resource owner's). Client Identifiers are no longer included in access tokens for unauthenticated clients. More work needed on IAccessTokenAnalyzer and the access token formatter. We need to generalize the serialization itself so folks can use JWT, etc. We also still need access token to have a host-defined map of claims. Fixes #104 Fixes #102