Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Removes inappropriate input validation of the signingKey argument in the ↵ | Andrew Arnott | 2013-12-03 | 1 | -2/+0 |
| | | | | | | | | AccessToken.CreateFormatter method. This was breaking ResourceServer scenarios where the ResourceServer did not have the authorization server's private signing key. Fixes #298 | ||||
* | Updates NuGet packages. | Andrew Arnott | 2013-10-19 | 2 | -1/+14 |
| | |||||
* | Strong-name key is replaced with non-encrypted one. | Andrew Arnott | 2013-06-15 | 1 | -5/+5 |
| | |||||
* | Lots of StyleCop fixes. | Andrew Arnott | 2013-03-26 | 1 | -1/+4 |
| | |||||
* | Adds a cookie delegating handler, fixes tests. | Andrew Arnott | 2013-03-23 | 1 | -2/+2 |
| | |||||
* | Switched Channel to receiving messages via HttpRequestMessage as well. | Andrew Arnott | 2013-03-04 | 1 | -4/+4 |
| | |||||
* | Fixes up user rejection cases. | Andrew Arnott | 2013-03-03 | 1 | -44/+44 |
| | |||||
* | Fixes basic auth creation. | Andrew Arnott | 2013-03-01 | 1 | -1/+1 |
| | |||||
* | Adds support for symmetric key signing and encryption of access tokens. | Andrew Arnott | 2013-03-01 | 1 | -0/+9 |
| | | | | This targets the common scenario where authorization servers and resource servers are actually on the same web application, and asymmetric cryptography is overkill and requires extra setup. | ||||
* | Fixes OAuthConsumer twitter sample. | Andrew Arnott | 2013-02-09 | 2 | -51/+0 |
| | |||||
* | Updates to Validation 2.0.2 and log4net 2.0.0. | Andrew Arnott | 2013-01-27 | 2 | -4/+4 |
| | |||||
* | OAuth2.Client builds. | Andrew Arnott | 2013-01-13 | 4 | -3/+59 |
| | |||||
* | Updates Validation NuGet package references for .NET 4.5 | Andrew Arnott | 2012-12-28 | 1 | -1/+1 |
| | |||||
* | Accomodates nuget's insistent project file changes. | Andrew Arnott | 2012-12-27 | 1 | -0/+2 |
| | |||||
* | Fixes the 16 failing unit tests. | Andrew Arnott | 2012-12-27 | 1 | -1/+0 |
| | |||||
* | Upgrades to Validation 2.0.1 to solve partially trusted callers problem. | Andrew Arnott | 2012-12-27 | 2 | -4/+4 |
| | |||||
* | Removes more remnants of Code Contracts. | Andrew Arnott | 2012-12-26 | 7 | -66/+2 |
| | |||||
* | Replaces DNOA's internal Requires class with Validation NuGet package. | Andrew Arnott | 2012-12-26 | 7 | -0/+16 |
| | |||||
* | Adds ClientBase.AuthorizeRequest overloads that accept WebHeaderCollection. | Andrew Arnott | 2012-11-11 | 1 | -1/+14 |
| | | | | Fixes #119 | ||||
* | Adjusted AssemblyInfo.cs to be unique for each assembly. | Andrew Arnott | 2012-09-29 | 1 | -9/+1 |
| | | | | This should fix nuget pdb package submission to symbolsource.org | ||||
* | Authorization Server hosts now instantiate their own AccessTokens rather ↵ | Andrew Arnott | 2012-04-25 | 1 | -24/+45 |
| | | | | | | | than just parameters. AccessTokens are now serialized via a virtual method on that instance. Fixes #38, I think. | ||||
* | Fixed build breaks when targeting .NET 3.5. | Andrew Arnott | 2012-04-23 | 4 | -7/+7 |
| | |||||
* | Fixes access denial errors from OAuth 2 resource servers so they include the ↵ | Andrew Arnott | 2012-04-22 | 8 | -77/+302 |
| | | | | | | required parameters in their WWW-Authenticate headers. Fixes #124 | ||||
* | Fixed HTTP Basic authentication for OAuth 2 clients so that it actually ↵ | Andrew Arnott | 2012-04-19 | 2 | -2/+2 |
| | | | | works in the sample. | ||||
* | Fixed up the configuration story for OAuth 2. | Andrew Arnott | 2012-04-18 | 6 | -177/+4 |
| | |||||
* | StyleCop cleanup, and reversal of some code changes that were no longer ↵ | Andrew Arnott | 2012-04-18 | 5 | -23/+76 |
| | | | | necessary. | ||||
* | We have HTTP Basic client authentication working now in OAuth 2. | Andrew Arnott | 2012-04-18 | 7 | -3/+238 |
| | |||||
* | Trimmed off xml doc comment. | Andrew Arnott | 2012-04-14 | 1 | -1/+0 |
| | |||||
* | Fixed C# warning. | Andrew Arnott | 2012-04-04 | 1 | -1/+1 |
| | |||||
* | AccessToken is now a public class. | Andrew Arnott | 2012-04-01 | 3 | -10/+12 |
| | | | | | | | | | | | Resource Servers can now handle access tokens that are issued for a client's data (not a 3rd party resource owner's). Client Identifiers are no longer included in access tokens for unauthenticated clients. More work needed on IAccessTokenAnalyzer and the access token formatter. We need to generalize the serialization itself so folks can use JWT, etc. We also still need access token to have a host-defined map of claims. Fixes #104 Fixes #102 | ||||
* | Moved localizable strings into specific OAuth 2 assemblies. | Andrew Arnott | 2012-03-31 | 2 | -85/+1 |
| | |||||
* | Fixed up an authorization server's token endpoint to generate more accurate ↵ | Andrew Arnott | 2012-03-30 | 3 | -96/+20 |
| | | | | error messages. | ||||
* | Removed broken class diagram. | Andrew Arnott | 2012-03-24 | 2 | -165/+0 |
| | |||||
* | A bunch more moving of OAuth2 classes between assemblies. | Andrew Arnott | 2012-03-16 | 11 | -726/+0 |
| | |||||
* | Redistributed OAuth2 code into their more specific assemblies. | Andrew Arnott | 2012-03-16 | 40 | -3049/+83 |
| | |||||
* | Access token endpoint now can respond with appropriate errors. | Andrew Arnott | 2012-03-14 | 1 | -2/+9 |
| | |||||
* | Fixed error message generated in exception thrown for bad access token requests. | Andrew Arnott | 2012-03-14 | 2 | -3/+3 |
| | |||||
* | FxCop fixes and suppressions. | Andrew Arnott | 2012-03-10 | 6 | -3/+25 |
| | |||||
* | Applied all the StyleCop fixes necessary by the StyleCop 4.7 upgrade. | Andrew Arnott | 2012-03-10 | 6 | -6/+6 |
| | |||||
* | Hacks in support for Facebook, which is missing the token_type parameter in ↵ | Andrew Arnott | 2012-03-07 | 1 | -1/+1 |
| | | | | | | its successful access token responses. Fixes #82 | ||||
* | Replaced API requirements for HttpRequestInfo with HttpRequestBase (new in ↵ | Andrew Arnott | 2012-03-05 | 3 | -12/+13 |
| | | | | | | .NET 3.5 SP1). This makes us more friendly to MVC as well as mock-based unit testing. | ||||
* | StyleCop fix. | Andrew Arnott | 2012-02-25 | 1 | -2/+1 |
| | |||||
* | Added client credential grant type support and a test to prove it. | Andrew Arnott | 2012-02-25 | 3 | -5/+56 |
| | | | | Fixes #33 | ||||
* | Adds support for the resource owner password credential grant. | Andrew Arnott | 2012-02-24 | 3 | -1/+88 |
| | | | | Fixes #72 | ||||
* | OAuth2 resource servers accept the HTTP verbs: PUT, DELETE, HEAD in addition ↵ | Andrew Arnott | 2012-02-23 | 1 | -0/+1 |
| | | | | | | to the normal GET, POST Fixes #62 | ||||
* | Split out the authorization carrying messages into distinct interfaces. | Andrew Arnott | 2012-02-23 | 13 | -132/+160 |
| | | | | This is to support additional grant types such as resource owner password credential and client credentials. | ||||
* | Fixed compiler warning. | Andrew Arnott | 2012-02-22 | 1 | -1/+1 |
| | |||||
* | Split up end user authorization request message types between auth code and ↵ | Andrew Arnott | 2012-02-21 | 4 | -17/+78 |
| | | | | implicit. | ||||
* | Added scaffolding for OAuth2 unit tests and added the first test for client ↵ | Andrew Arnott | 2012-02-20 | 10 | -17/+115 |
| | | | | authorization. | ||||
* | Added spec required HTTP header in access token response. | Andrew Arnott | 2012-02-19 | 1 | -0/+1 |
| | |||||
* | Removed requirement for callback parameter, per the spec. | Andrew Arnott | 2012-02-19 | 2 | -3/+9 |
| | |||||
* | Fixed up the various protocol channels to correctly apply HTTP headers ↵ | Andrew Arnott | 2012-02-19 | 2 | -7/+3 |
| | | | | prescribed by the messages. | ||||
* | Avoid a NullReferenceException is an OAuth 2 resource server's direct ↵ | Andrew Arnott | 2012-02-16 | 1 | -3/+7 |
| | | | | response message doesn't implement IHttpDirectResponse. | ||||
* | Suppressed refresh tokens when client credentials are used to comply with ↵ | Andrew Arnott | 2012-02-16 | 3 | -0/+25 |
| | | | | OAuth 2.0 section 4.4.3. | ||||
* | Added a couple of new authorization request response codes. | Andrew Arnott | 2012-02-13 | 1 | -0/+10 |
| | |||||
* | Added valid scope token verification. | Andrew Arnott | 2012-02-12 | 3 | -1/+42 |
| | |||||
* | Added ClientType enum. | Andrew Arnott | 2012-02-12 | 3 | -0/+60 |
| | |||||
* | Renamed IConsumerDescription to IClientDescription. | Andrew Arnott | 2012-02-12 | 4 | -16/+16 |
| | |||||
* | Fixed many FxCop messages in OAuth2 assemblies. #68 | Andrew Arnott | 2012-02-09 | 6 | -2/+35 |
| | |||||
* | Added DotNetOpenAuth.OAuth.Common to contain dependencies shared between ↵ | Andrew Arnott | 2012-02-08 | 4 | -7/+15 |
| | | | | | | OAuth 1 and OAuth 2. Related to and closes #71 | ||||
* | Updated all copyright notices to reflect copyright assignment to Outercurve. | Andrew Arnott | 2012-02-05 | 50 | -101/+101 |
| | | | | Fixes #66 | ||||
* | Added Moq's internal proxy generator to InternalsVisibleTo so that mocks can ↵ | Andrew Arnott | 2012-01-29 | 1 | -0/+2 |
| | | | | be created on internal types. | ||||
* | Renamed assembly DotNetOpenAuth.Messaging(.UI) to DotNetOpenAuth.Core(.UI) | Andrew Arnott | 2012-01-12 | 1 | -2/+2 |
| | |||||
* | Removed some lingering ccrewrite.exe dependent code. | Andrew Arnott | 2011-09-20 | 1 | -1/+1 |
| | |||||
* | All product assemblies build without ccrewrite.exe now. | Andrew Arnott | 2011-09-18 | 18 | -52/+52 |
| | |||||
* | Broke out OAuth 2 into 4 separate assemblies. | Andrew Arnott | 2011-08-01 | 10 | -1287/+6 |
| | |||||
* | Added missing imports. | Andrew Arnott | 2011-07-12 | 1 | -0/+1 |
| | |||||
* | Moved all the redundant project settings into a common .props file. | Andrew Arnott | 2011-07-11 | 1 | -293/+0 |
| | |||||
* | Trying to fix up configuration section code. | Andrew Arnott | 2011-07-10 | 3 | -3/+3 |
| | |||||
* | OAuth2 project builds. | Andrew Arnott | 2011-07-02 | 1 | -0/+10 |
| | |||||
* | Added missing AssemblyInfo.cs files. | Andrew Arnott | 2011-07-02 | 1 | -0/+52 |
| | |||||
* | First pass at dividing DotNetOpenAuth features into separate assemblies. | Andrew Arnott | 2011-07-01 | 62 | -0/+6627 |
Nothing compiles at this point. |