Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Splitting up the OpenID profile into OpenID RP and OP. The core OpenID DLL ↵ | Andrew Arnott | 2011-07-20 | 179 | -1817/+2643 |
| | | | | compiles, but the RP and OP ones do not. | ||||
* | Added missing imports. | Andrew Arnott | 2011-07-12 | 3 | -0/+3 |
| | |||||
* | Removed redundant tag prefix definitions. | Andrew Arnott | 2011-07-12 | 1 | -4/+0 |
| | |||||
* | Moved all the redundant project settings into a common .props file. | Andrew Arnott | 2011-07-11 | 5 | -1470/+8 |
| | |||||
* | Functionality and one sample is fixed up enough to permit an OpenID login to ↵ | Andrew Arnott | 2011-07-11 | 3 | -12/+27 |
| | | | | complete successfully. | ||||
* | Fixed fully-qualified type name bug. | Andrew Arnott | 2011-07-10 | 1 | -1/+1 |
| | |||||
* | Trying to fix up configuration section code. | Andrew Arnott | 2011-07-10 | 21 | -74/+78 |
| | |||||
* | Fixed compile errors in samples. | Andrew Arnott | 2011-07-10 | 1 | -5/+5 |
| | |||||
* | Fixed build breaks in test project. | Andrew Arnott | 2011-07-10 | 5 | -9/+31 |
| | |||||
* | StyleCop fixes. | Andrew Arnott | 2011-07-10 | 3 | -4/+7 |
| | |||||
* | OAuth2 project builds. | Andrew Arnott | 2011-07-02 | 2 | -0/+12 |
| | |||||
* | OAuth project now builds. | Andrew Arnott | 2011-07-02 | 8 | -18/+56 |
| | |||||
* | OpenID project now builds. | Andrew Arnott | 2011-07-02 | 21 | -91/+148 |
| | | | | * Many of the resource items (resx, png) are improperly declared in the project file. | ||||
* | Added missing AssemblyInfo.cs files. | Andrew Arnott | 2011-07-02 | 6 | -3/+173 |
| | |||||
* | InfoCard project now builds. | Andrew Arnott | 2011-07-02 | 5 | -2/+64 |
| | |||||
* | Messaging project now compiles. | Andrew Arnott | 2011-07-02 | 11 | -101/+96 |
| | |||||
* | First pass at dividing DotNetOpenAuth features into separate assemblies. | Andrew Arnott | 2011-07-01 | 499 | -404/+1676 |
| | | | | Nothing compiles at this point. | ||||
* | Added a web browser control to facilitate OAuth 2 client authorization. | Andrew Arnott | 2011-06-28 | 4 | -0/+378 |
| | |||||
* | API simplification. | Andrew Arnott | 2011-06-28 | 1 | -7/+22 |
| | |||||
* | A bit of public API cleanup and code consolidation in ClientBase. | Andrew Arnott | 2011-06-27 | 3 | -30/+51 |
| | |||||
* | Added OAuth 2 class diagram. | Andrew Arnott | 2011-06-27 | 2 | -0/+34 |
| | |||||
* | Merge branch 'v3.4' | Andrew Arnott | 2011-06-26 | 2 | -2/+29 |
|\ | | | | | | | | | Conflicts: samples/OAuthClient/OAuthClient.csproj | ||||
| * | Merge branch 'v3.4' into sample2legged | Andrew Arnott | 2011-06-09 | 65 | -541/+1786 |
| |\ | |||||
| | * | Made multipart POST parts allow changing of their ContentDisposition. This ↵ | Andrew Arnott | 2011-06-05 | 1 | -2/+2 |
| | | | | | | | | | | | | is because file parts to Google are expected to be "form-data" instead of "file". | ||||
| * | | Added 2-legged OAuth consumer sample. | Andrew Arnott | 2011-04-05 | 1 | -0/+27 |
| | | | |||||
* | | | OAuth 2 Authorization Server no longer accepts authorization code requests ↵ | Andrew Arnott | 2011-06-25 | 3 | -2/+16 |
| | | | | | | | | | | | | from clients with empty secrets. | ||||
* | | | Updated to "Bearer Tokens draft 6" spec. | Andrew Arnott | 2011-06-25 | 2 | -5/+1 |
| | | | |||||
* | | | Simplified AuthorizationServer by moving some code into binding elements. | Andrew Arnott | 2011-06-25 | 3 | -25/+34 |
| | | | |||||
* | | | Non-impactful code tidying. | Andrew Arnott | 2011-06-24 | 1 | -5/+3 |
| | | | |||||
* | | | Fixed StyleCop messages. | Andrew Arnott | 2011-06-23 | 9 | -38/+40 |
| | | | |||||
* | | | Merging in support for and sample of implicit grants. | Andrew Arnott | 2011-06-23 | 18 | -54/+321 |
|\ \ \ | |||||
| * | | | Split up the PrepareAccessToken method. | Andrew Arnott | 2011-06-22 | 3 | -47/+46 |
| | | | | |||||
| * | | | Removed a couple of parameters from auth code success authorization ↵ | Andrew Arnott | 2011-06-21 | 3 | -17/+27 |
| | | | | | | | | | | | | | | | | responses that only belonged in access token responses. | ||||
| * | | | Shrank the time interval within which an authorization code may be exchanged ↵ | Andrew Arnott | 2011-06-21 | 1 | -1/+2 |
| | | | | | | | | | | | | | | | | for an access or refresh token. | ||||
| * | | | Merge branch 'master' into ImplicitGrants | Andrew Arnott | 2011-06-21 | 1 | -1/+1 |
| |\ \ \ | |||||
| * | | | | We have an implicit grant javascript client that can obtain an access token. | Andrew Arnott | 2011-06-20 | 9 | -10/+106 |
| | | | | | | | | | | | | | | | | | | | | It doesn't know how to use it yet though. | ||||
| * | | | | Access token lifetimes are now controlled by the IAuthorizationServer ↵ | Andrew Arnott | 2011-06-16 | 5 | -29/+65 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | instance supplied by the host. It is consistent whether the access token is obtained via implicit grant or from a refresh token. | ||||
| * | | | | Implicit grants are now sort of working on the authorization server side. | unknown | 2011-06-15 | 12 | -33/+158 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Still to do: * Ensure no auto-authorize of access tokens based on previous authorizations for the unauthenticated client. * Provide the authorization server with a way to indicate access token lifetime, and to veto the request based on the requested scopes being too dangerous for the less secure implicit grant type. | ||||
| * | | | | Fixed a comment error and a hard-coded string. | unknown | 2011-06-15 | 1 | -1/+2 |
| | | | | | |||||
* | | | | | Added OutgoingWebResponse.Respond method to replace its Send method, and ↵ | Andrew Arnott | 2011-06-23 | 19 | -60/+156 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | avoid the ThreadAbortException that is no longer the recommended approach. Fixes #40 | ||||
* | | | | | Fixed a comment error and a hard-coded string. | Andrew Arnott | 2011-06-23 | 1 | -1/+2 |
| |/ / / |/| | | | |||||
* | | | | Edited ↵ | Marcus | 2011-06-21 | 1 | -1/+1 |
|/ / / | | | | | | | | | | src/DotNetOpenAuth/OAuth2/ChannelElements/OAuth2ResourceServerChannel.cs via GitHub | ||||
* | | | Last touch-ups to get DNOA up to draft 16 compliance (at least for the ↵ | Andrew Arnott | 2011-06-12 | 3 | -1/+3 |
| | | | | | | | | | | | | | | | | | | success cases). Incidentally, Facebook doesn't currently support draft 16, so fb interop is broken. | ||||
* | | | Fixed a few build breaks. | Andrew Arnott | 2011-06-11 | 1 | -12/+0 |
| | | | |||||
* | | | Brought bearer access token up to the draft 16 spec. | Andrew Arnott | 2011-06-11 | 7 | -109/+89 |
| | | | |||||
* | | | Renamed ITokenCarryingRequest to IAuthorizationCarryingRequest. | Andrew Arnott | 2011-06-11 | 11 | -130/+39 |
| | | | |||||
* | | | StyleCop fix. | Andrew Arnott | 2011-06-11 | 1 | -1/+1 |
| | | | |||||
* | | | Moved access token request scope parameter into a derived class so that it ↵ | Andrew Arnott | 2011-06-11 | 10 | -98/+154 |
| | | | | | | | | | | | | | | | | | | does not apply to the authorization code access token request. Deleted the assertion access token request message which is no longer in the base spec. | ||||
* | | | More work toward draft 16 compliance. | Andrew Arnott | 2011-06-10 | 13 | -144/+88 |
| | | | |||||
* | | | Added OAuth 2.0 messages class diagram. | Andrew Arnott | 2011-06-07 | 2 | -0/+267 |
| | | | |||||
* | | | Added OAuth 2.0 DRAFT 16 spec. | Andrew Arnott | 2011-06-07 | 1 | -0/+1 |
| | | | |||||
* | | | Updated version # to 4.0. | Andrew Arnott | 2011-06-06 | 1 | -1/+1 |
| | | | |||||
* | | | Fixed unit tests so there are no failures. | Andrew Arnott | 2011-05-28 | 7 | -10/+29 |
| | | | |||||
* | | | FxCop fixes. | Andrew Arnott | 2011-05-28 | 60 | -405/+554 |
| | | | |||||
* | | | StyleCop fixes. | Andrew Arnott | 2011-05-27 | 13 | -19/+19 |
| | | | |||||
* | | | Optimized RP's return_to nonce to not require URI-escaping and to bucket all ↵ | Andrew Arnott | 2011-05-27 | 1 | -3/+8 |
| | | | | | | | | | | | | nonces in the same bin. | ||||
* | | | OAuth 2 client is more forgiving of incorrect Content-Type headers coming in ↵ | Andrew Arnott | 2011-05-27 | 2 | -1/+7 |
| | | | | | | | | | | | | direct responses. | ||||
* | | | Allowed for cycling of symmetric cryptographic keys by replacing the ↵ | Andrew Arnott | 2011-05-27 | 18 | -110/+251 |
| | | | | | | | | | | | | | | | | | | effectively constant byte[] secret with a new ICryptoKeyStore throughout the OAuth 2 and OpenID stacks. And StyleCop fixes. | ||||
* | | | Added the necessary copyright notice on the Diffie-Hellman algorithm ↵ | Andrew Arnott | 2011-05-22 | 4 | -1/+34 |
| | | | | | | | | | | | | implementation. | ||||
* | | | Moved the private secret age setting to a more global location. | Andrew Arnott | 2011-05-21 | 4 | -25/+25 |
| | | | |||||
* | | | Moved ICryptoKeyStore and related types to the Messaging.Bindings namespace. | Andrew Arnott | 2011-05-21 | 13 | -11/+25 |
| | | | |||||
* | | | Fixed association lifetime handling for encoded handles. | Andrew Arnott | 2011-05-21 | 2 | -2/+2 |
| | | | |||||
* | | | StyleCop fixes. | Andrew Arnott | 2011-05-20 | 8 | -18/+102 |
| | | | |||||
* | | | Consolidated the IProviderApplicationStore and IRelyingPartyApplicationStore ↵ | Andrew Arnott | 2011-05-20 | 14 | -66/+42 |
| | | | | | | | | | | | | interfaces since they were equivalent. | ||||
* | | | Providers and Relying Parties both implement a unified pair of ↵ | Andrew Arnott | 2011-05-20 | 15 | -68/+253 |
| | | | | | | | | | | | | | | | | | | ICryptoKeyStore and INonceStore. OPs can configure to use encoded association handles or database-backed ones based on a simple web.config switch. | ||||
* | | | Updated samples and project template custom stores to use ICryptoKeyStore ↵ | Andrew Arnott | 2011-05-15 | 3 | -2/+6 |
| | | | | | | | | | | | | for RPs. | ||||
* | | | OpenID RPs switched over to the ICryptoKeyStore backing store. | Andrew Arnott | 2011-05-13 | 13 | -417/+371 |
| | | | |||||
* | | | Added wrapper that allows storing of associations in an ICryptoKeyStore. | Andrew Arnott | 2011-05-12 | 3 | -1/+93 |
| | | | |||||
* | | | Added ICryptoKeyStore to try to abstract away association stores as well as ↵ | Andrew Arnott | 2011-05-12 | 5 | -9/+448 |
| | | | | | | | | | | | | other secrets that OpenID RPs, OPs, and OAuth must keep. | ||||
* | | | Removed redundant code and increased key length for OAuth 2.0 authorization ↵ | Andrew Arnott | 2011-05-10 | 1 | -11/+1 |
| | | | | | | | | | | | | server sample. | ||||
* | | | Increased symmetric key length from 128 bits to 256 bits that protect ↵ | Andrew Arnott | 2011-05-10 | 1 | -1/+1 |
| | | | | | | | | | | | | association secrets. | ||||
* | | | Changed references to DistinguishingFactor to be ProviderEndpoint. | Andrew Arnott | 2011-05-10 | 3 | -17/+17 |
| | | | |||||
* | | | Brought custom association store sample for Providers up to date. | Andrew Arnott | 2011-05-09 | 4 | -6/+21 |
| | | | |||||
* | | | Added implementation guidance to the IProviderAssociationStore interface. | Andrew Arnott | 2011-05-08 | 1 | -0/+9 |
| | | | |||||
* | | | Created an IProviderAssociationStore interface so that encoding the ↵ | Andrew Arnott | 2011-05-08 | 30 | -140/+270 |
| | | | | | | | | | | | | association into the handle is just one option. | ||||
* | | | StyleCop fixes and functional touch-ups. | Andrew Arnott | 2011-05-08 | 24 | -128/+278 |
| | | | |||||
* | | | Added a binary DataBag serializer mechanism that cuts the association handle ↵ | Andrew Arnott | 2011-05-08 | 6 | -21/+153 |
| | | | | | | | | | | | | size down from 300+ characters to 141 characters. | ||||
* | | | Refactored UriStyleMessageFormatter into a class hierarchy that will make it ↵ | Andrew Arnott | 2011-05-08 | 4 | -256/+315 |
| | | | | | | | | | | | | easy to serialize DataBag instances differently. | ||||
* | | | OpenID Provider association stores replaced with self-describing association ↵ | Andrew Arnott | 2011-05-07 | 35 | -444/+459 |
| | | | | | | | | | | | | handles. | ||||
* | | | Moved UriStyleMessageFormatter into Messaging namespace. | Andrew Arnott | 2011-05-07 | 2 | -4/+4 |
| | | | |||||
* | | | StyleCop fix. | Andrew Arnott | 2011-05-07 | 1 | -17/+22 |
| | | | |||||
* | | | Moved DataBag into the Messaging namespace to prepare for use by OpenID ↵ | Andrew Arnott | 2011-05-07 | 5 | -69/+151 |
| | | | | | | | | | | | | associations. | ||||
* | | | Merge branch 'v3.4' into oauth2 | Andrew Arnott | 2011-05-06 | 57 | -479/+1718 |
|\ \ \ | | |/ | |/| | | | | | | | | | | | | | | | | | | | Conflicts: samples/OAuthServiceProvider/Code/Global.cs src/DotNetOpenAuth/Configuration/DotNetOpenAuth.xsd src/DotNetOpenAuth/DotNetOpenAuth.csproj src/DotNetOpenAuth/Messaging/Channel.cs src/version.txt | ||||
| * | | Increased allowable time for perf tests to run. | Andrew Arnott | 2011-05-03 | 1 | -3/+3 |
| | | | |||||
| * | | Removed quiet CPU test step. | Andrew Arnott | 2011-05-03 | 1 | -3/+3 |
| | | | |||||
| * | | Made quiet CPU requirement during perf tests more lenient. | Andrew Arnott | 2011-05-03 | 1 | -1/+1 |
| | | | |||||
| * | | Fix (hopefully) the Win32Exception thrown on the build server during unit tests. | Andrew Arnott | 2011-05-03 | 1 | -1/+2 |
| | | | |||||
| * | | Moved the performance measuring method into TestBase. | Andrew Arnott | 2011-05-03 | 3 | -35/+37 |
| | | | |||||
| * | | Hid more implementation details of perf measurements. | Andrew Arnott | 2011-05-03 | 4 | -130/+118 |
| | | | |||||
| * | | StyleCop clean. | Andrew Arnott | 2011-05-03 | 7 | -385/+196 |
| | | | |||||
| * | | Perf tests now compare results against a baseline produced on the test machine. | Andrew Arnott | 2011-05-02 | 8 | -65/+914 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This uses portions of MeasureIt, which normalizes perf measurements in terms of the machine's speed. We also do other things to reduce noise: * set process and thread priority * wait for the CPU to quiet down before beginning. * set power management to High Performance * wake the CPU up if it's in a low power mode. | ||||
| * | | Incremented version file. | Andrew Arnott | 2011-05-01 | 1 | -1/+1 |
| | | | |||||
| * | | Removed the explicit namespaces from all the SuppressMessageAttribute ↵ | Andrew Arnott | 2011-04-30 | 21 | -89/+98 |
| | | | | | | | | | | | | references. | ||||
| * | | Suppressed a new FxCop message. | Andrew Arnott | 2011-04-30 | 1 | -0/+1 |
| | | | |||||
| * | | Updated NuGet web.config transform to include another security comment. | Andrew Arnott | 2011-04-30 | 1 | -0/+1 |
| | | | |||||
| * | | Makes the maximum URL length adjustable to accomodate browsers and firewalls. | Andrew Arnott | 2011-04-30 | 3 | -9/+62 |
| | | | | | | | | | | | | Closes #29 | ||||
| * | | FxCop fixes and suppressions. | Andrew Arnott | 2011-04-29 | 38 | -329/+528 |
| | | | | | | | | | | | | The "CodeAnalysis" configuration now runs clean. | ||||
| * | | Fixed StyleCop issues. | Andrew Arnott | 2011-04-27 | 2 | -1/+2 |
| | | | |||||
| * | | Removed the allowSubPath and allowAdditionalQueryParameters settings from ↵ | Andrew Arnott | 2011-04-23 | 5 | -73/+5 |
| | | | | | | | | | | | | the trusted Providers configuration since we don't yet have an implementation to support it, nor users asking for it. | ||||
| * | | Hooked up trusted provider check during OpenID identifier discovery and ↵ | Andrew Arnott | 2011-04-23 | 4 | -20/+46 |
| | | | | | | | | | | | | positive assertion processing at the RP. |