summaryrefslogtreecommitdiffstats
path: root/src/DotNetOpenAuth
Commit message (Collapse)AuthorAgeFilesLines
* Added OAuth Consumer components and fixed a bunch of build breaks.origin/SilverlightAndrew Arnott2010-10-2439-30/+451
|
* Added empty Silverlight 4 project.Andrew Arnott2010-10-212-0/+77
|
* Added a response stream to 301 redirect messages so that filters like ↵Andrew Arnott2010-10-201-2/+15
| | | | WebSense will let them through.
* Added no-cache headers to all outgoing response messages.Andrew Arnott2010-10-201-1/+9
|
* Added a provider model to substitute in a means for obtaining URLs that ↵Andrew Arnott2010-09-158-50/+134
| | | | | | download embedded resource streams. This unblocks dasBlog in their pursuit of a non-Page ASP.NET pipeline.
* Exposed OP Endpoint to OpenID RP COM Server.Andrew Arnott2010-09-061-0/+7
|
* Fixed StyleCop error.Andrew Arnott2010-08-111-5/+5
|
* Fixed UTF8 preambles in reporting.Andrew Arnott2010-08-091-2/+7
|
* Added configuration option to avoid the ?dnoa.userSuppliedIdentifier ↵Andrew Arnott2010-08-054-3/+33
| | | | parameter added to authentication requests.
* Added StyleCop to toolset and regular command line build.Andrew Arnott2010-07-191-1/+2
| | | | As part of this, all projects now import EnlistmentInfo.props and .targets.
* Merge branch 'v3.3' into v3.4Andrew Arnott2010-07-192-1/+3
|\ | | | | | | | | Conflicts: samples/DotNetOpenAuth.ApplicationBlock/Util.cs
| * Merge branch 'v3.2' into v3.3Andrew Arnott2010-07-192-4/+22
| |\
| | * Merge branch 'v3.1' into v3.2Andrew Arnott2010-07-195-10/+28
| | |\ | | | | | | | | | | | | | | | | Conflicts: samples/DotNetOpenAuth.ApplicationBlock/Util.cs
| | | * Merge branch 'v3.0' into v3.1Andrew Arnott2010-07-195-10/+28
| | | |\ | | | | | | | | | | | | | | | | | | | | Conflicts: samples/DotNetOpenAuth.ApplicationBlock/Util.cs
| | | | * Fixes OAuth 1.0(a) base signature string construction to omit the realm ↵Andrew Arnott2010-06-271-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | parameter when included in the HTTP Authorization header. Fixes Trac #207
| | | | * Fixed typo in comments.Andrew Arnott2010-05-153-6/+6
| | | | |
| | | | * Fix for UIRequest.Icon deserialization exception due to nullable struct types.Andrew Arnott2010-05-081-4/+20
| | | | | | | | | | | | | | | | | | | | Fixes Trac #195
| * | | | Removed Identifier.OriginalString from the public API to avoid generating ↵Andrew Arnott2010-06-241-1/+1
| | | | | | | | | | | | | | | | | | | | confusion with users.
* | | | | Applied signature equality check timing fix to OAuth.Andrew Arnott2010-07-161-1/+1
| | | | |
* | | | | comment fixAndrew Arnott2010-07-151-1/+1
| | | | |
* | | | | Fixed message expiration check to also disallow post-dated timestamps.Andrew Arnott2010-07-153-2/+22
| | | | | | | | | | | | | | | | | | | | This is a security mitigation for those who are trying to brute force a message signature, and might otherwise give themselves a huge time window by setting a nonce date far into the future.
* | | | | Fix for timing-dependent HMAC signature equality check.Andrew Arnott2010-07-142-1/+38
| | | | |
* | | | | Removed dependency on publicize.exe, which crashes now in some branches due ↵Andrew Arnott2010-07-099-1/+148
| | | | | | | | | | | | | | | | | | | | to bugs, and publicize.exe doesn't appear to be supported by Microsoft any more, so we might as well get off it.
* | | | | Fixed warnings that show up with new code contracts version.Andrew Arnott2010-07-033-6/+0
| | | | |
* | | | | Added a legitimate project configuration and its own intermediate directory ↵Andrew Arnott2010-06-241-3/+38
| | | | | | | | | | | | | | | | | | | | for a no-UI version of the DLL.
* | | | | Project can no build optionally without UI controls.Andrew Arnott2010-06-241-23/+29
| | | | |
* | | | | Fixes support for OpenID RP controls' ReturnToUrl property to receive values ↵unknown2010-06-221-3/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | starting with "~/" Fixes Trac #204
* | | | | When the parent window throws an error in an invocation from the child ↵unknown2010-06-211-2/+7
| | | | | | | | | | | | | | | | | | | | window, it no longer prevents the child window from closing itself.
* | | | | Fixed some issues when multiple OpenIdLogin controls are present on the same ↵Andrew Arnott2010-06-171-1/+3
| | | | | | | | | | | | | | | | | | | | page.
* | | | | Fixed NullReferenceException that can occur.Andrew Arnott2010-06-171-0/+1
| | | | |
* | | | | Corrected regression caused by 07ca685b321e.Andrew Arnott2010-06-161-4/+3
| | | | |
* | | | | Fixed exceptions from SimpleUri when handling user-supplied identifiers ↵Andrew Arnott2010-06-151-14/+34
| | | | | | | | | | | | | | | | | | | | given in non-normalized form.
* | | | | Fix for OpenIdLogin.EnableViewState="false" for validation control unhandled ↵Andrew Arnott2010-06-151-4/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | exception. Fixes Trac #201
* | | | | Added documentation for the config setting added in b16ab6be9av3.4.4.10162Andrew Arnott2010-06-111-0/+12
| | | | |
* | | | | Resolved some CC warnings.Andrew Arnott2010-06-102-13/+0
| | | | |
* | | | | Fixed some code contract warnings about contract classes needing to be abstract.Andrew Arnott2010-06-1010-16/+46
| | | | |
* | | | | Resolved build breaks after upgrading Code Contracts.Andrew Arnott2010-06-103-26/+17
| | | | |
* | | | | Added IRequest.ClearResponseExtensions() for OPsAndrew Arnott2010-06-104-1/+51
| | | | | | | | | | | | | | | | | | | | Resolves Trac #181
* | | | | Merge branch 'v3.3' into v3.4Andrew Arnott2010-06-084-8/+9
|\ \ \ \ \ | |/ / / /
| * | | | Merge branch 'v3.2' into v3.3Andrew Arnott2010-06-081-0/+1
| |\ \ \ \ | | |/ / /
| | * | | Made UIRequest serializable, like all the other OpenID extension request ↵Andrew Arnott2010-06-081-0/+1
| | | | | | | | | | | | | | | | | | | | messages.
| * | | | Fixed typo in comments.Andrew Arnott2010-05-153-8/+8
| | | | |
* | | | | Oops... the last fix wasn't quite right.Andrew Arnott2010-06-081-4/+8
| | | | |
* | | | | The enter key no longer suppresses form submit on other forms on the page.Andrew Arnott2010-06-081-10/+10
| | | | | | | | | | | | | | | | | | | | Fixes Trac #200. Thanks for the bug report, Scott Hanselman.
* | | | | OpenIdAjaxOptions now allows an MVC app to specify a form name instead of ↵Andrew Arnott2010-06-083-2/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | only a form index. Thanks Gísli K. Björnsson for the tip.
* | | | | StyleCop fixes.Andrew Arnott2010-06-082-3/+2
| | | | |
* | | | | Merging in interoperability work for Blogger and other lesser OPs.Andrew Arnott2010-06-084-4/+35
|\ \ \ \ \
| * | | | | Put the strictness controls behind a switch so it doesn't require its own ↵Andrew Arnott2010-06-082-1/+26
| | | | | | | | | | | | | | | | | | | | | | | | branch.
| * | | | | Merged in v3.4.3.Andrew Arnott2010-04-1639-273/+862
| |\ \ \ \ \
| * | | | | | Message parts with constant values are no longer strict about capitalization.Andrew Arnott2010-03-301-1/+1
| | | | | | |
| * | | | | | This allows RPs to allow poor OPs to include empty openid.invalidate_handle ↵Andrew Arnott2010-03-222-3/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | arguments. Blogger issues positive assertions to stateless RPs with empty openid.invalidate_handle parameters.
* | | | | | | Logging now better represents the original (unprocessed) message.Andrew Arnott2010-05-281-1/+1
| | | | | | |
* | | | | | | Fix FxCop message.Andrew Arnott2010-05-281-0/+15
| | | | | | |
* | | | | | | Fix for outgoing check_auth messages so they don't modify positive assertion ↵Andrew Arnott2010-05-289-29/+136
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | messages causing invalid signatures. Fixes Trac #198
* | | | | | | Stabilized reference paths and removed HintPaths.Andrew Arnott2010-05-281-3/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This is work for targeting .NET 4.0.
* | | | | | | We no longer emit a warning when dropping null keys with null or empty values.Andrew Arnott2010-05-081-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes Trac #194
* | | | | | | StyleCop fixes.Andrew Arnott2010-05-081-2/+1
| | | | | | |
* | | | | | | Fix for UIRequest.Icon deserialization exception due to nullable struct types.Andrew Arnott2010-05-081-4/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes Trac #195
* | | | | | | Merge branch 'v3.3' into v3.4Andrew Arnott2010-05-061-1/+1
|\ \ \ \ \ \ \ | | |_|/ / / / | |/| | | | |
| * | | | | | Merge branch 'v3.2' into v3.3Andrew Arnott2010-05-061-1/+1
| |\ \ \ \ \ \ | | | |_|/ / / | | |/| | | |
| | * | | | | Fixed another bug in AXFetchAsSregTransform that prevented OPs from being ↵Andrew Arnott2010-05-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | able to respond to AX-carrying auth requests.
* | | | | | | Merge branch 'v3.3' into v3.4Andrew Arnott2010-05-052-8/+4
|\ \ \ \ \ \ \ | |/ / / / / /
| * | | | | | Merge branch 'v3.2' into v3.3Andrew Arnott2010-05-052-8/+4
| |\ \ \ \ \ \ | | |/ / / / /
| | * | | | | Fixed AXFetchAsSregTransform bug that threw an exception at the OP when an ↵Andrew Arnott2010-05-052-7/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | incoming extension contained just an AX extension. Fixes bug reported at http://stackoverflow.com/questions/2724512/dotnetopenauth-openid-provider-sequence-contains-more-than-one-element/2764800
| | * | | | | Fixed OP bug in the AXFetchAsSregTransform that would cause an ↵Andrew Arnott2010-05-051-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | InvalidCastException on anonymous requests.
* | | | | | | Merge branch 'v3.3' into v3.4Andrew Arnott2010-04-307-61/+52
|\ \ \ \ \ \ \ | |/ / / / / / | | | | / / / | |_|_|/ / / |/| | | | | Conflicts: src/DotNetOpenAuth/OpenId/RelyingParty/AssociationManager.cs
| * | | | | Merge branch 'v3.2' into v3.3Andrew Arnott2010-04-307-61/+52
| |\ \ \ \ \ | | |/ / / / | | | | | | | | | | | | | | | | | | Conflicts: src/DotNetOpenAuth/OpenId/IAssociationStore.cs
| | * | | | Merge branch 'v3.1' into v3.2Andrew Arnott2010-04-307-61/+52
| | |\ \ \ \ | | | | |/ / | | | |/| |
| | | * | | Merge branch 'v3.0' into v3.1Andrew Arnott2010-04-307-61/+52
| | | |\ \ \ | | | | | |/ | | | | |/|
| | | | * | Moved the VerificationException catch lower in the stack so it catches more ↵Andrew Arnott2010-04-301-11/+13
| | | | | | | | | | | | | | | | | | | | | | | | problems.
| | | | * | Corrected comments.Andrew Arnott2010-04-272-2/+5
| | | | | |
| | | | * | Removed the unused ClearExpiredAssociations method.Andrew Arnott2010-03-254-48/+34
| | | | | |
* | | | | | Fixed an occasional unhandled exception.v3.4.3.10103Andrew Arnott2010-04-131-4/+9
| | | | | |
* | | | | | Added logging around certificate verification to try to find perf problem.Andrew Arnott2010-04-111-0/+3
| | | | | |
* | | | | | Marked Flatten as obsolete.Andrew Arnott2010-04-112-2/+5
| | | | | |
* | | | | | Fixed runtime exception caused by recent URI normalization work of the ↵Andrew Arnott2010-04-091-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Identifier class.
* | | | | | Fixed build break that resulted from recent Code Contracts upgrade.Andrew Arnott2010-04-021-1/+1
| | | | | |
* | | | | | Fixed Google Hostmeta discovery module to dispose of open HTTP streams, and ↵Andrew Arnott2010-04-022-49/+57
| | | | | | | | | | | | | | | | | | | | | | | | to limit the length of their result.
* | | | | | StyleCop and FxCop fixes.Andrew Arnott2010-04-0125-182/+296
| | | | | |
* | | | | | Fixed signature verification bugs where claimed_id's have trailing dots in ↵Andrew Arnott2010-03-3010-29/+456
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | path segments, or capital scheme or host names. Merge branch 'dotbug' into v3.4
| * | | | | | Fixed equality checks for the problematic URIs, and added a regression test ↵Andrew Arnott2010-03-301-1/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | for it. Also added reporting of full vs. partial trust hosting.
| * | | | | | Added missing documentation for the allowDualPurposeIdentifiers config setting.Andrew Arnott2010-03-301-1/+8
| | | | | | |
| * | | | | | Added log warning message when problematic OpenIDs are encountered by the ↵Andrew Arnott2010-03-306-1/+62
| | | | | | | | | | | | | | | | | | | | | | | | | | | | RP, and a configuration option to enable/disable approximate OpenID discovery for partial trust hosts.
| * | | | | | Added escaping normalization for Path part in SimpleUri class.Andrew Arnott2010-03-301-0/+18
| | | | | | |
| * | | | | | Finished getting a reasonable story for partial trust scenarios with the ↵Andrew Arnott2010-03-305-23/+150
| | | | | | | | | | | | | | | | | | | | | | | | | | | | problematic URI paths.
| * | | | | | Fixed signature verification when claimed_id has capital scheme or host ↵Andrew Arnott2010-03-304-7/+40
| | | | | | | | | | | | | | | | | | | | | | | | | | | | name, or has path segments that end with a period under partial trust.
| * | | | | | A bit of code clean-up and adding comments.Andrew Arnott2010-03-301-9/+16
| | | | | | |
| * | | | | | In full trust environments, it seems that identifiers trailing periods in ↵Andrew Arnott2010-03-301-5/+146
| | |_|_|_|/ | |/| | | | | | | | | | | | | | | | path segments work now.
* | | | | | UI extension request now won't throw on unrecognized values of the mode ↵Andrew Arnott2010-03-301-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | parameter.
* | | | | | Fixes NullReferenceException thrown when the HttpContext.Current is null or ↵Andrew Arnott2010-03-263-3/+32
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | its Session property is null. Fixes Trac #189
* | | | | OpenIdRelyingParty no longer filters out OpenID 1.1 endpoints when in ↵Andrew Arnott2010-03-221-5/+5
| | | | | | | | | | | | | | | | | | | | stateless mode if the RP has already opted out of replay protection for downlevel OPs.
* | | | | Fixed the bloated icon look of the new (transparent) openid favicon.Andrew Arnott2010-03-221-0/+0
| | | | |
* | | | | Fixed NullReferenceException that can occur when ClaimedIdentifier is null.Andrew Arnott2010-03-201-2/+2
| | | | |
* | | | | Avoided a js error in some scenarios.Andrew Arnott2010-03-191-1/+1
| | | | |
* | | | | Enhanced JS cloning function.Andrew Arnott2010-03-191-1/+5
| | | | |
* | | | | Fixed JSON serialization regression in recent changes.Andrew Arnott2010-03-191-1/+1
| | | | | | | | | | | | | | | | | | | | Fixes Trac #188.
* | | | | Fixed build breaks introduced by last merge.Andrew Arnott2010-03-171-1/+1
| | | | |
* | | | | Merge branch 'v3.3' into v3.4Andrew Arnott2010-03-173-3/+16
|\ \ \ \ \ | |/ / / / | | | | | | | | | | | | | | | | | | | | Conflicts: samples/OpenIdRelyingPartyMvc/Views/User/LoginPopup.aspx src/DotNetOpenAuth.Test/OpenId/Extensions/ExtensionsInteropHelperRPRequestTests.cs
| * | | | Merge branch 'v3.2' into v3.3Andrew Arnott2010-03-174-47/+15
| |\ \ \ \ | | |/ / / | | | | | | | | | | | | | | | Conflicts: src/DotNetOpenAuth/Properties/AssemblyInfo.cs
| | * | | Merge branch 'v3.1' into v3.2Andrew Arnott2010-03-172-42/+9
| | |\ \ \ | | | |/ /
generated by cgit v1.1 at 2025-06-09 15:29:23 +0000