Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | StyleCop fixes. | Andrew Arnott | 2012-12-26 | 2 | -0/+3 |
| | |||||
* | Fixes timeout in unit tests. | Andrew Arnott | 2012-12-26 | 4 | -28/+40 |
| | |||||
* | CreateAccessToken reveals username to host | Andrew Arnott | 2012-12-24 | 1 | -0/+94 |
| | | | | | | | IAuthorizationServerHost.CreateAccessToken now has access to authoring usernames. Fixes #219 | ||||
* | Fixes StyleCop errors. | Andrew Arnott | 2012-12-24 | 1 | -6/+6 |
| | |||||
* | Verifies that client credential grants receive approved scope in response. | Andrew Arnott | 2012-12-24 | 1 | -0/+28 |
| | | | | Closes #242 | ||||
* | Adds ability for OAuth 2 clients to accept deeper access token JSON responses. | Andrew Arnott | 2012-12-24 | 1 | -0/+4 |
| | | | | Fixes #168 | ||||
* | Merge branch 'v4.1' | Andrew Arnott | 2012-12-02 | 4 | -1/+126 |
|\ | | | | | | | | | | | | | Conflicts: src/DotNetOpenAuth.OAuth2.ResourceServer/OAuth2/StandardAccessTokenAnalyzer.cs src/DotNetOpenAuth.Test/OAuth2/OAuth2TestBase.cs src/version.txt | ||||
| * | Fixes StyleCop error | Andrew Arnott | 2012-11-12 | 1 | -1/+1 |
| | | |||||
| * | Fixes an InternalErrorException thrown when decoding corrupted access tokens. | Andrew Arnott | 2012-11-11 | 1 | -1/+1 |
| | | | | | | | | Fixes #178 | ||||
| * | Adds more token decoding tests. | Andrew Arnott | 2012-11-11 | 2 | -10/+65 |
| | | |||||
| * | Avoids OOM exceptions from ResourceServer | Andrew Arnott | 2012-11-11 | 1 | -2/+14 |
| | | | | | | | | Related to #178 | ||||
| * | Fixes exception thrown on missing access token | Andrew Arnott | 2012-11-10 | 2 | -0/+47 |
| | | | | | | | | | | | | | | | | | | The resource server was throwing an ArgumentException when an HTTP Authorization header appeared with a value of "Bearer " but no access token. We now throw a ProtocolException that can produce the appropriate error to the client. Fixes #230 | ||||
| * | Fixes AsHttpResposneMessage() exception when response has no stream. | Andrew Arnott | 2012-11-02 | 1 | -0/+11 |
| | | | | | | | | Fixes #226 | ||||
* | | Adds a LinkedIn interop test. | Andrew Arnott | 2012-11-22 | 1 | -0/+23 |
| | | | | | | | | Part of investigation of issue #232 | ||||
* | | Authorization servers can override the granted scopes for all grant types. | Andrew Arnott | 2012-10-30 | 3 | -4/+66 |
| | | | | | | | | | | | | This change adds the ability for authorization servers to override the granted scopes of client credential and resource owner password grant types. Fixes #225 | ||||
* | | Merge remote-tracking branch 'aarnott/master' | Andrew Arnott | 2012-10-29 | 1 | -2/+35 |
|\ \ | |||||
| * | | Adds AuthorizationServer.DecodeRefreshToken | Andrew Arnott | 2012-07-20 | 1 | -2/+35 |
| | | | | | | | | | | | | | | | | | | And a unit test. Fixes #182 | ||||
* | | | Merge branch 'v4.1' | Andrew Arnott | 2012-10-14 | 5 | -9/+120 |
|\ \ \ | | |/ | |/| | |||||
| * | | Added OutgoingWebResponse.AsHttpResponseMessage extension method. | Andrew Arnott | 2012-10-09 | 1 | -1/+29 |
| | | | |||||
| * | | Adjusted AssemblyInfo.cs to be unique for each assembly. | Andrew Arnott | 2012-09-29 | 1 | -8/+1 |
| | | | | | | | | | | | | This should fix nuget pdb package submission to symbolsource.org | ||||
| * | | Adds ClientBase.CreateAuthorizingHandler | Andrew Arnott | 2012-09-26 | 3 | -0/+90 |
| |/ | | | | | | | | | | | This method creates an HttpMessageHandler that automatically applies the OAuth 2 access token (bearer) to all outbound HTTP requests. Fixes #205 | ||||
* | | Fixing one more place it was missed, also changing to OPTIONS | Matt Hawley | 2012-08-10 | 1 | -3/+3 |
| | | |||||
* | | Adding PATCH and OPTION http verbs | Matt Hawley | 2012-08-10 | 1 | -3/+9 |
|/ | |||||
* | Fixed failing ClientCredentialGrant unit test | Andrew Arnott | 2012-05-29 | 1 | -0/+3 |
| | |||||
* | Resource owner password grant method rename | Andrew Arnott | 2012-05-29 | 1 | -1/+1 |
| | | | | | | | | | | | | Renamed IAuthorizationServerHost.IsResourceOwnerCredentialValid to TryAuthorizeResourceOwnerCredentialGrant so that authorization servers are prepared to approve refresh tokens that may be issued as a result of a resource owner password grant. This also removes some of the "validation" that wasn't really doing anything useful for resource owner password grant types. Toward an eventual fix for #138 | ||||
* | Moved some JSON serialization logic to MessagingUtilities and added a unit test. | Andrew Arnott | 2012-04-28 | 3 | -0/+41 |
| | |||||
* | Authorization Server hosts now instantiate their own AccessTokens rather ↵ | Andrew Arnott | 2012-04-25 | 1 | -1/+1 |
| | | | | | | | than just parameters. AccessTokens are now serialized via a virtual method on that instance. Fixes #38, I think. | ||||
* | Anonymous clients can now exchange resource owner credentials for refresh ↵ | Andrew Arnott | 2012-04-22 | 1 | -3/+18 |
| | | | | | | | | and access tokens. (authenticated clients already could). Fixes #100 | ||||
* | Fixes access denial errors from OAuth 2 resource servers so they include the ↵ | Andrew Arnott | 2012-04-22 | 2 | -1/+6 |
| | | | | | | required parameters in their WWW-Authenticate headers. Fixes #124 | ||||
* | Fixed several failing unit tests due to their non-support for network ↵ | Andrew Arnott | 2012-04-20 | 1 | -1/+1 |
| | | | | credential simulations. | ||||
* | Fixed HTTP Basic authentication for OAuth 2 clients so that it actually ↵ | Andrew Arnott | 2012-04-19 | 3 | -2/+36 |
| | | | | works in the sample. | ||||
* | Fixed up the configuration story for OAuth 2. | Andrew Arnott | 2012-04-18 | 1 | -1/+1 |
| | |||||
* | StyleCop cleanup, and reversal of some code changes that were no longer ↵ | Andrew Arnott | 2012-04-18 | 3 | -30/+2 |
| | | | | necessary. | ||||
* | We have HTTP Basic client authentication working now in OAuth 2. | Andrew Arnott | 2012-04-18 | 9 | -14/+89 |
| | |||||
* | Authorization server hosts may now provide canonical usernames for the ↵ | Andrew Arnott | 2012-04-16 | 1 | -1/+2 |
| | | | | | | resource owner given correct resource owner credentials. Fixes #103 | ||||
* | Authorization servers now gain insight into the calling client when ↵ | Andrew Arnott | 2012-04-15 | 1 | -1/+1 |
| | | | | | | validating resource owner credential grant type requests. Fixes #101 | ||||
* | Added a public constructor to ClaimsResponse. | Andrew Arnott | 2012-04-08 | 4 | -8/+8 |
| | | | | | | Also made the probable type URIs that it accepts public and easily discoverable. Fixes #116 | ||||
* | Renamed IAuthorizationServer to IAuthorizationServerHost. | Andrew Arnott | 2012-04-08 | 4 | -7/+7 |
| | | | | To avoid confusion with the concrete class AuthorizationServer. | ||||
* | Merge branch 'v4.0' | Andrew Arnott | 2012-04-05 | 43 | -139/+173 |
|\ | | | | | | | | | | | | | Conflicts: src/DotNetOpenAuth.OAuth2.Client/DotNetOpenAuth.OAuth2.Client.csproj src/DotNetOpenAuth.OAuth2.ResourceServer/DotNetOpenAuth.OAuth2.ResourceServer.csproj src/DotNetOpenAuth.OAuth2.ResourceServer/OAuth2/ResourceServer.cs | ||||
| * | Fixes InvalidCastExceptions for Identifier and Realm conversions | Andrew Arnott | 2012-04-05 | 2 | -0/+34 |
| | | | | | | | | | | | | | | | | that can result from receiving a message before the static constructors for those types have executed. This corrects the regression introduced in v4.0.0. Fixes #109 | ||||
| * | Replaced a bunch of TestCase attribute usages with simply Test. | Andrew Arnott | 2012-04-04 | 42 | -139/+139 |
| | | |||||
* | | Added tests to assert serializability of provider requests. | Andrew Arnott | 2012-04-03 | 2 | -0/+47 |
| | | |||||
* | | Fixed a couple failing unit tests. | Andrew Arnott | 2012-03-17 | 2 | -14/+20 |
| | | |||||
* | | Fixed build breaks in the solution. | Andrew Arnott | 2012-03-17 | 2 | -1/+5 |
|/ | |||||
* | Access token endpoint now can respond with appropriate errors. | Andrew Arnott | 2012-03-14 | 4 | -16/+49 |
| | |||||
* | Fixed StyleCop settings files by removing the deprecated "Microsoft." prefixes. | Andrew Arnott | 2012-03-11 | 1 | -4/+4 |
| | |||||
* | Turned off ccrewrite.exe for test assembly. | Andrew Arnott | 2012-03-10 | 1 | -2/+2 |
| | |||||
* | Applied all the StyleCop fixes necessary by the StyleCop 4.7 upgrade. | Andrew Arnott | 2012-03-10 | 7 | -10/+17 |
| | |||||
* | Fixed StyleCop messages. | Andrew Arnott | 2012-03-05 | 1 | -1/+1 |
| | |||||
* | HttpRequestInfo ctors are now internal, and publicly we have static | Andrew Arnott | 2012-03-05 | 1 | -1/+1 |
| | | | | factory methods that return HttpRequestBase instances. | ||||
* | Replaced API requirements for HttpRequestInfo with HttpRequestBase (new in ↵ | Andrew Arnott | 2012-03-05 | 14 | -156/+138 |
| | | | | | | .NET 3.5 SP1). This makes us more friendly to MVC as well as mock-based unit testing. | ||||
* | Revised more unit testes to use "fluent" NUnit API. | Andrew Arnott | 2012-02-26 | 1 | -13/+13 |
| | |||||
* | Migrated OAuth 2 tests to the new NUnit Assert syntax. | Andrew Arnott | 2012-02-25 | 3 | -23/+23 |
| | |||||
* | Changed all uses of [TestCase] to [Test] to better emulate recommended NUnit ↵ | Andrew Arnott | 2012-02-25 | 90 | -425/+425 |
| | | | | patterns. | ||||
* | Added scopes to the tested authorization flows. | Andrew Arnott | 2012-02-25 | 3 | -7/+17 |
| | |||||
* | Renamed ObtainClientAccessToken. | Andrew Arnott | 2012-02-25 | 1 | -1/+1 |
| | |||||
* | Added client credential grant type support and a test to prove it. | Andrew Arnott | 2012-02-25 | 1 | -0/+25 |
| | | | | Fixes #33 | ||||
* | Adds support for the resource owner password credential grant. | Andrew Arnott | 2012-02-24 | 2 | -1/+2 |
| | | | | Fixes #72 | ||||
* | Added basic test for resource owner password authorizatino request. Not yet ↵ | Andrew Arnott | 2012-02-23 | 3 | -8/+29 |
| | | | | passing. | ||||
* | Enabled unit test. | Andrew Arnott | 2012-02-22 | 1 | -1/+2 |
| | |||||
* | Split up end user authorization request message types between auth code and ↵ | Andrew Arnott | 2012-02-21 | 2 | -3/+15 |
| | | | | implicit. | ||||
* | Added assertions about whether the client is authenticated. | Andrew Arnott | 2012-02-21 | 2 | -1/+11 |
| | |||||
* | Added two more OAuth2 unit tests, for the UserAgentClient class. | Andrew Arnott | 2012-02-21 | 4 | -19/+99 |
| | |||||
* | Moved some test code around. | Andrew Arnott | 2012-02-20 | 2 | -8/+18 |
| | |||||
* | Added scaffolding for OAuth2 unit tests and added the first test for client ↵ | Andrew Arnott | 2012-02-20 | 7 | -24/+164 |
| | | | | authorization. | ||||
* | Updated all copyright notices to reflect copyright assignment to Outercurve. | Andrew Arnott | 2012-02-05 | 140 | -281/+281 |
| | | | | Fixes #66 | ||||
* | Updated some unit tests to match new argument validation code. | Andrew Arnott | 2012-01-29 | 8 | -10/+10 |
| | |||||
* | OpenID messages that are missing signed parameters now throws ↵ | Andrew Arnott | 2012-01-29 | 2 | -0/+50 |
| | | | | | | ProtocolException instead of KeyNotFoundException. Fixes #45 | ||||
* | Fixed references to old DNOA.Messaging assembly in .config files. | Andrew Arnott | 2012-01-29 | 1 | -3/+3 |
| | |||||
* | Fixed build warnings regarding CLR 4 build and System.Web.Abstractions.dll | Andrew Arnott | 2012-01-29 | 1 | -1/+2 |
| | |||||
* | Added more support for HttpContextBase, HttpResponseBase, etc. | Andrew Arnott | 2012-01-29 | 1 | -3/+3 |
| | |||||
* | Renamed assembly DotNetOpenAuth.Messaging(.UI) to DotNetOpenAuth.Core(.UI) | Andrew Arnott | 2012-01-12 | 1 | -4/+4 |
| | |||||
* | Fixed build breaks. | Andrew Arnott | 2012-01-12 | 3 | -12/+15 |
| | |||||
* | Fixed some build breaks. | Andrew Arnott | 2011-11-02 | 2 | -9/+11 |
| | |||||
* | Fixed build warnings. | Andrew Arnott | 2011-10-09 | 1 | -1/+1 |
| | |||||
* | All product assemblies build without ccrewrite.exe now. | Andrew Arnott | 2011-09-18 | 16 | -39/+47 |
| | |||||
* | Fixed failing OAuth Appendix test. | Andrew Arnott | 2011-09-02 | 1 | -6/+4 |
| | |||||
* | Fixed a bug in configuration section handling that caused even simple unit ↵ | Andrew Arnott | 2011-08-15 | 1 | -1/+6 |
| | | | | tests to fail. | ||||
* | StyleCop work. | Andrew Arnott | 2011-08-07 | 2 | -30/+44 |
| | |||||
* | The test project now builds, so the whole solution does. | Andrew Arnott | 2011-08-02 | 19 | -85/+224 |
| | |||||
* | The whole solution now builds except for the test project. | Andrew Arnott | 2011-08-02 | 1 | -0/+60 |
| | |||||
* | Trying to fix up configuration section code. | Andrew Arnott | 2011-07-10 | 2 | -3/+3 |
| | |||||
* | Fixed build breaks in test project. | Andrew Arnott | 2011-07-10 | 5 | -9/+31 |
| | |||||
* | First pass at dividing DotNetOpenAuth features into separate assemblies. | Andrew Arnott | 2011-07-01 | 1 | -6/+0 |
| | | | | Nothing compiles at this point. | ||||
* | Added OutgoingWebResponse.Respond method to replace its Send method, and ↵ | Andrew Arnott | 2011-06-23 | 9 | -28/+34 |
| | | | | | | avoid the ThreadAbortException that is no longer the recommended approach. Fixes #40 | ||||
* | Fixed a few build breaks. | Andrew Arnott | 2011-06-11 | 1 | -12/+0 |
| | |||||
* | Fixed unit tests so there are no failures. | Andrew Arnott | 2011-05-28 | 4 | -7/+15 |
| | |||||
* | FxCop fixes. | Andrew Arnott | 2011-05-28 | 1 | -3/+3 |
| | |||||
* | Moved ICryptoKeyStore and related types to the Messaging.Bindings namespace. | Andrew Arnott | 2011-05-21 | 2 | -0/+2 |
| | |||||
* | Providers and Relying Parties both implement a unified pair of ↵ | Andrew Arnott | 2011-05-20 | 3 | -6/+8 |
| | | | | | | ICryptoKeyStore and INonceStore. OPs can configure to use encoded association handles or database-backed ones based on a simple web.config switch. | ||||
* | Updated samples and project template custom stores to use ICryptoKeyStore ↵ | Andrew Arnott | 2011-05-15 | 1 | -1/+1 |
| | | | | for RPs. | ||||
* | Created an IProviderAssociationStore interface so that encoding the ↵ | Andrew Arnott | 2011-05-08 | 4 | -8/+8 |
| | | | | association into the handle is just one option. | ||||
* | StyleCop fixes and functional touch-ups. | Andrew Arnott | 2011-05-08 | 3 | -4/+5 |
| | |||||
* | OpenID Provider association stores replaced with self-describing association ↵ | Andrew Arnott | 2011-05-07 | 6 | -18/+16 |
| | | | | handles. | ||||
* | Merge branch 'v3.4' into oauth2 | Andrew Arnott | 2011-05-06 | 8 | -65/+769 |
|\ | | | | | | | | | | | | | | | | | Conflicts: samples/OAuthServiceProvider/Code/Global.cs src/DotNetOpenAuth/Configuration/DotNetOpenAuth.xsd src/DotNetOpenAuth/DotNetOpenAuth.csproj src/DotNetOpenAuth/Messaging/Channel.cs src/version.txt | ||||
| * | Increased allowable time for perf tests to run. | Andrew Arnott | 2011-05-03 | 1 | -3/+3 |
| | | |||||
| * | Removed quiet CPU test step. | Andrew Arnott | 2011-05-03 | 1 | -3/+3 |
| | | |||||
| * | Made quiet CPU requirement during perf tests more lenient. | Andrew Arnott | 2011-05-03 | 1 | -1/+1 |
| | | |||||
| * | Fix (hopefully) the Win32Exception thrown on the build server during unit tests. | Andrew Arnott | 2011-05-03 | 1 | -1/+2 |
| | | |||||
| * | Moved the performance measuring method into TestBase. | Andrew Arnott | 2011-05-03 | 3 | -35/+37 |
| | |