summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Splitting up the OpenID profile into OpenID RP and OP. The core OpenID DLL ↵Andrew Arnott2011-07-20179-1817/+2643
| | | | compiles, but the RP and OP ones do not.
* Added missing imports.Andrew Arnott2011-07-123-0/+3
|
* Removed redundant tag prefix definitions.Andrew Arnott2011-07-121-4/+0
|
* Moved all the redundant project settings into a common .props file.Andrew Arnott2011-07-115-1470/+8
|
* Functionality and one sample is fixed up enough to permit an OpenID login to ↵Andrew Arnott2011-07-113-12/+27
| | | | complete successfully.
* Fixed fully-qualified type name bug.Andrew Arnott2011-07-101-1/+1
|
* Trying to fix up configuration section code.Andrew Arnott2011-07-1021-74/+78
|
* Fixed compile errors in samples.Andrew Arnott2011-07-101-5/+5
|
* Fixed build breaks in test project.Andrew Arnott2011-07-105-9/+31
|
* StyleCop fixes.Andrew Arnott2011-07-103-4/+7
|
* OAuth2 project builds.Andrew Arnott2011-07-022-0/+12
|
* OAuth project now builds.Andrew Arnott2011-07-028-18/+56
|
* OpenID project now builds.Andrew Arnott2011-07-0221-91/+148
| | | | * Many of the resource items (resx, png) are improperly declared in the project file.
* Added missing AssemblyInfo.cs files.Andrew Arnott2011-07-026-3/+173
|
* InfoCard project now builds.Andrew Arnott2011-07-025-2/+64
|
* Messaging project now compiles.Andrew Arnott2011-07-0211-101/+96
|
* First pass at dividing DotNetOpenAuth features into separate assemblies.Andrew Arnott2011-07-01499-404/+1676
| | | | Nothing compiles at this point.
* Added a web browser control to facilitate OAuth 2 client authorization.Andrew Arnott2011-06-284-0/+378
|
* API simplification.Andrew Arnott2011-06-281-7/+22
|
* A bit of public API cleanup and code consolidation in ClientBase.Andrew Arnott2011-06-273-30/+51
|
* Added OAuth 2 class diagram.Andrew Arnott2011-06-272-0/+34
|
* Merge branch 'v3.4'Andrew Arnott2011-06-262-2/+29
|\ | | | | | | | | Conflicts: samples/OAuthClient/OAuthClient.csproj
| * Merge branch 'v3.4' into sample2leggedAndrew Arnott2011-06-0965-541/+1786
| |\
| | * Made multipart POST parts allow changing of their ContentDisposition. This ↵Andrew Arnott2011-06-051-2/+2
| | | | | | | | | | | | is because file parts to Google are expected to be "form-data" instead of "file".
| * | Added 2-legged OAuth consumer sample.Andrew Arnott2011-04-051-0/+27
| | |
* | | OAuth 2 Authorization Server no longer accepts authorization code requests ↵Andrew Arnott2011-06-253-2/+16
| | | | | | | | | | | | from clients with empty secrets.
* | | Updated to "Bearer Tokens draft 6" spec.Andrew Arnott2011-06-252-5/+1
| | |
* | | Simplified AuthorizationServer by moving some code into binding elements.Andrew Arnott2011-06-253-25/+34
| | |
* | | Non-impactful code tidying.Andrew Arnott2011-06-241-5/+3
| | |
* | | Fixed StyleCop messages.Andrew Arnott2011-06-239-38/+40
| | |
* | | Merging in support for and sample of implicit grants.Andrew Arnott2011-06-2318-54/+321
|\ \ \
| * | | Split up the PrepareAccessToken method.Andrew Arnott2011-06-223-47/+46
| | | |
| * | | Removed a couple of parameters from auth code success authorization ↵Andrew Arnott2011-06-213-17/+27
| | | | | | | | | | | | | | | | responses that only belonged in access token responses.
| * | | Shrank the time interval within which an authorization code may be exchanged ↵Andrew Arnott2011-06-211-1/+2
| | | | | | | | | | | | | | | | for an access or refresh token.
| * | | Merge branch 'master' into ImplicitGrantsAndrew Arnott2011-06-211-1/+1
| |\ \ \
| * | | | We have an implicit grant javascript client that can obtain an access token.Andrew Arnott2011-06-209-10/+106
| | | | | | | | | | | | | | | | | | | | It doesn't know how to use it yet though.
| * | | | Access token lifetimes are now controlled by the IAuthorizationServer ↵Andrew Arnott2011-06-165-29/+65
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | instance supplied by the host. It is consistent whether the access token is obtained via implicit grant or from a refresh token.
| * | | | Implicit grants are now sort of working on the authorization server side.unknown2011-06-1512-33/+158
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Still to do: * Ensure no auto-authorize of access tokens based on previous authorizations for the unauthenticated client. * Provide the authorization server with a way to indicate access token lifetime, and to veto the request based on the requested scopes being too dangerous for the less secure implicit grant type.
| * | | | Fixed a comment error and a hard-coded string.unknown2011-06-151-1/+2
| | | | |
* | | | | Added OutgoingWebResponse.Respond method to replace its Send method, and ↵Andrew Arnott2011-06-2319-60/+156
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | avoid the ThreadAbortException that is no longer the recommended approach. Fixes #40
* | | | | Fixed a comment error and a hard-coded string.Andrew Arnott2011-06-231-1/+2
| |/ / / |/| | |
* | | | Edited ↵Marcus2011-06-211-1/+1
|/ / / | | | | | | | | | src/DotNetOpenAuth/OAuth2/ChannelElements/OAuth2ResourceServerChannel.cs via GitHub
* | | Last touch-ups to get DNOA up to draft 16 compliance (at least for the ↵Andrew Arnott2011-06-123-1/+3
| | | | | | | | | | | | | | | | | | success cases). Incidentally, Facebook doesn't currently support draft 16, so fb interop is broken.
* | | Fixed a few build breaks.Andrew Arnott2011-06-111-12/+0
| | |
* | | Brought bearer access token up to the draft 16 spec.Andrew Arnott2011-06-117-109/+89
| | |
* | | Renamed ITokenCarryingRequest to IAuthorizationCarryingRequest.Andrew Arnott2011-06-1111-130/+39
| | |
* | | StyleCop fix.Andrew Arnott2011-06-111-1/+1
| | |
* | | Moved access token request scope parameter into a derived class so that it ↵Andrew Arnott2011-06-1110-98/+154
| | | | | | | | | | | | | | | | | | does not apply to the authorization code access token request. Deleted the assertion access token request message which is no longer in the base spec.
* | | More work toward draft 16 compliance.Andrew Arnott2011-06-1013-144/+88
| | |
* | | Added OAuth 2.0 messages class diagram.Andrew Arnott2011-06-072-0/+267
| | |
* | | Added OAuth 2.0 DRAFT 16 spec.Andrew Arnott2011-06-071-0/+1
| | |
* | | Updated version # to 4.0.Andrew Arnott2011-06-061-1/+1
| | |
* | | Fixed unit tests so there are no failures.Andrew Arnott2011-05-287-10/+29
| | |
* | | FxCop fixes.Andrew Arnott2011-05-2860-405/+554
| | |
* | | StyleCop fixes.Andrew Arnott2011-05-2713-19/+19
| | |
* | | Optimized RP's return_to nonce to not require URI-escaping and to bucket all ↵Andrew Arnott2011-05-271-3/+8
| | | | | | | | | | | | nonces in the same bin.
* | | OAuth 2 client is more forgiving of incorrect Content-Type headers coming in ↵Andrew Arnott2011-05-272-1/+7
| | | | | | | | | | | | direct responses.
* | | Allowed for cycling of symmetric cryptographic keys by replacing the ↵Andrew Arnott2011-05-2718-110/+251
| | | | | | | | | | | | | | | | | | effectively constant byte[] secret with a new ICryptoKeyStore throughout the OAuth 2 and OpenID stacks. And StyleCop fixes.
* | | Added the necessary copyright notice on the Diffie-Hellman algorithm ↵Andrew Arnott2011-05-224-1/+34
| | | | | | | | | | | | implementation.
* | | Moved the private secret age setting to a more global location.Andrew Arnott2011-05-214-25/+25
| | |
* | | Moved ICryptoKeyStore and related types to the Messaging.Bindings namespace.Andrew Arnott2011-05-2113-11/+25
| | |
* | | Fixed association lifetime handling for encoded handles.Andrew Arnott2011-05-212-2/+2
| | |
* | | StyleCop fixes.Andrew Arnott2011-05-208-18/+102
| | |
* | | Consolidated the IProviderApplicationStore and IRelyingPartyApplicationStore ↵Andrew Arnott2011-05-2014-66/+42
| | | | | | | | | | | | interfaces since they were equivalent.
* | | Providers and Relying Parties both implement a unified pair of ↵Andrew Arnott2011-05-2015-68/+253
| | | | | | | | | | | | | | | | | | ICryptoKeyStore and INonceStore. OPs can configure to use encoded association handles or database-backed ones based on a simple web.config switch.
* | | Updated samples and project template custom stores to use ICryptoKeyStore ↵Andrew Arnott2011-05-153-2/+6
| | | | | | | | | | | | for RPs.
* | | OpenID RPs switched over to the ICryptoKeyStore backing store.Andrew Arnott2011-05-1313-417/+371
| | |
* | | Added wrapper that allows storing of associations in an ICryptoKeyStore.Andrew Arnott2011-05-123-1/+93
| | |
* | | Added ICryptoKeyStore to try to abstract away association stores as well as ↵Andrew Arnott2011-05-125-9/+448
| | | | | | | | | | | | other secrets that OpenID RPs, OPs, and OAuth must keep.
* | | Removed redundant code and increased key length for OAuth 2.0 authorization ↵Andrew Arnott2011-05-101-11/+1
| | | | | | | | | | | | server sample.
* | | Increased symmetric key length from 128 bits to 256 bits that protect ↵Andrew Arnott2011-05-101-1/+1
| | | | | | | | | | | | association secrets.
* | | Changed references to DistinguishingFactor to be ProviderEndpoint.Andrew Arnott2011-05-103-17/+17
| | |
* | | Brought custom association store sample for Providers up to date.Andrew Arnott2011-05-094-6/+21
| | |
* | | Added implementation guidance to the IProviderAssociationStore interface.Andrew Arnott2011-05-081-0/+9
| | |
* | | Created an IProviderAssociationStore interface so that encoding the ↵Andrew Arnott2011-05-0830-140/+270
| | | | | | | | | | | | association into the handle is just one option.
* | | StyleCop fixes and functional touch-ups.Andrew Arnott2011-05-0824-128/+278
| | |
* | | Added a binary DataBag serializer mechanism that cuts the association handle ↵Andrew Arnott2011-05-086-21/+153
| | | | | | | | | | | | size down from 300+ characters to 141 characters.
* | | Refactored UriStyleMessageFormatter into a class hierarchy that will make it ↵Andrew Arnott2011-05-084-256/+315
| | | | | | | | | | | | easy to serialize DataBag instances differently.
* | | OpenID Provider association stores replaced with self-describing association ↵Andrew Arnott2011-05-0735-444/+459
| | | | | | | | | | | | handles.
* | | Moved UriStyleMessageFormatter into Messaging namespace.Andrew Arnott2011-05-072-4/+4
| | |
* | | StyleCop fix.Andrew Arnott2011-05-071-17/+22
| | |
* | | Moved DataBag into the Messaging namespace to prepare for use by OpenID ↵Andrew Arnott2011-05-075-69/+151
| | | | | | | | | | | | associations.
* | | Merge branch 'v3.4' into oauth2Andrew Arnott2011-05-0657-479/+1718
|\ \ \ | | |/ | |/| | | | | | | | | | | | | | | | | | | Conflicts: samples/OAuthServiceProvider/Code/Global.cs src/DotNetOpenAuth/Configuration/DotNetOpenAuth.xsd src/DotNetOpenAuth/DotNetOpenAuth.csproj src/DotNetOpenAuth/Messaging/Channel.cs src/version.txt
| * | Increased allowable time for perf tests to run.Andrew Arnott2011-05-031-3/+3
| | |
| * | Removed quiet CPU test step.Andrew Arnott2011-05-031-3/+3
| | |
| * | Made quiet CPU requirement during perf tests more lenient.Andrew Arnott2011-05-031-1/+1
| | |
| * | Fix (hopefully) the Win32Exception thrown on the build server during unit tests.Andrew Arnott2011-05-031-1/+2
| | |
| * | Moved the performance measuring method into TestBase.Andrew Arnott2011-05-033-35/+37
| | |
| * | Hid more implementation details of perf measurements.Andrew Arnott2011-05-034-130/+118
| | |
| * | StyleCop clean.Andrew Arnott2011-05-037-385/+196
| | |
| * | Perf tests now compare results against a baseline produced on the test machine.Andrew Arnott2011-05-028-65/+914
| | | | | | | | | | | | | | | | | | | | | | | | | | | This uses portions of MeasureIt, which normalizes perf measurements in terms of the machine's speed. We also do other things to reduce noise: * set process and thread priority * wait for the CPU to quiet down before beginning. * set power management to High Performance * wake the CPU up if it's in a low power mode.
| * | Incremented version file.Andrew Arnott2011-05-011-1/+1
| | |
| * | Removed the explicit namespaces from all the SuppressMessageAttribute ↵Andrew Arnott2011-04-3021-89/+98
| | | | | | | | | | | | references.
| * | Suppressed a new FxCop message.Andrew Arnott2011-04-301-0/+1
| | |
| * | Updated NuGet web.config transform to include another security comment.Andrew Arnott2011-04-301-0/+1
| | |
| * | Makes the maximum URL length adjustable to accomodate browsers and firewalls.Andrew Arnott2011-04-303-9/+62
| | | | | | | | | | | | Closes #29
| * | FxCop fixes and suppressions.Andrew Arnott2011-04-2938-329/+528
| | | | | | | | | | | | The "CodeAnalysis" configuration now runs clean.
| * | Fixed StyleCop issues.Andrew Arnott2011-04-272-1/+2
| | |
| * | Removed the allowSubPath and allowAdditionalQueryParameters settings from ↵Andrew Arnott2011-04-235-73/+5
| | | | | | | | | | | | the trusted Providers configuration since we don't yet have an implementation to support it, nor users asking for it.
| * | Hooked up trusted provider check during OpenID identifier discovery and ↵Andrew Arnott2011-04-234-20/+46
| | | | | | | | | | | | positive assertion processing at the RP.