summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Downgrading VS2010 sample projects to VS2008 now happens by creating NEW ↵Andrew Arnott2010-07-211-3/+44
| | | | | | project and solution files rather than wiping out the VS2010 ones. So now VS2008 and VS2010 users have solutions and projects they can open immediately.
* Fixed sample project downgrade to remove EnlistmentInfo imports that aren't ↵Andrew Arnott2010-07-212-1/+7
| | | | supported in MSBuild v3.5.
* Incremented version to v3.4.6.Andrew Arnott2010-07-201-1/+1
|
* Incremented version to v3.4.5.Andrew Arnott2010-07-201-1/+1
|
* StyleCop fixes that only appeared when building at the command line.Andrew Arnott2010-07-201-1/+1
|
* Added StyleCop to toolset and regular command line build.Andrew Arnott2010-07-193-8/+6
| | | | As part of this, all projects now import EnlistmentInfo.props and .targets.
* Added NUnit runner to the repo.Andrew Arnott2010-07-191-1/+1
|
* Merge branch 'v3.3' into v3.4Andrew Arnott2010-07-1911-9/+19
|\ | | | | | | | | Conflicts: samples/DotNetOpenAuth.ApplicationBlock/Util.cs
| * Merge branch 'v3.2' into v3.3Andrew Arnott2010-07-1912-13/+44
| |\
| | * Merge branch 'v3.1' into v3.2Andrew Arnott2010-07-1915-19/+50
| | |\ | | | | | | | | | | | | | | | | Conflicts: samples/DotNetOpenAuth.ApplicationBlock/Util.cs
| | | * Merge branch 'v3.0' into v3.1Andrew Arnott2010-07-1915-19/+50
| | | |\ | | | | | | | | | | | | | | | | | | | | Conflicts: samples/DotNetOpenAuth.ApplicationBlock/Util.cs
| | | | * Fixes OAuth 1.0(a) base signature string construction to omit the realm ↵Andrew Arnott2010-06-272-0/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | parameter when included in the HTTP Authorization header. Fixes Trac #207
| | | | * Fixed the namespace of several tests.Andrew Arnott2010-06-279-8/+9
| | | | |
| | | | * Fixed typo in comments.Andrew Arnott2010-05-153-6/+6
| | | | |
| | | | * Fix for UIRequest.Icon deserialization exception due to nullable struct types.Andrew Arnott2010-05-082-5/+26
| | | | | | | | | | | | | | | | | | | | Fixes Trac #195
| * | | | Removed Identifier.OriginalString from the public API to avoid generating ↵Andrew Arnott2010-06-241-1/+1
| | | | | | | | | | | | | | | | | | | | confusion with users.
* | | | | StyleCop fixes.Andrew Arnott2010-07-191-8/+9
| | | | |
* | | | | Applied signature equality check timing fix to OAuth.Andrew Arnott2010-07-161-1/+1
| | | | |
* | | | | Added a bit more timing text to the test.Andrew Arnott2010-07-161-0/+1
| | | | |
* | | | | comment fixAndrew Arnott2010-07-151-1/+1
| | | | |
* | | | | Fixed message expiration check to also disallow post-dated timestamps.Andrew Arnott2010-07-154-3/+37
| | | | | | | | | | | | | | | | | | | | This is a security mitigation for those who are trying to brute force a message signature, and might otherwise give themselves a huge time window by setting a nonce date far into the future.
* | | | | Fix for timing-dependent HMAC signature equality check.Andrew Arnott2010-07-143-3/+100
| | | | |
* | | | | Removed dependency on publicize.exe, which crashes now in some branches due ↵Andrew Arnott2010-07-0926-69/+197
| | | | | | | | | | | | | | | | | | | | to bugs, and publicize.exe doesn't appear to be supported by Microsoft any more, so we might as well get off it.
* | | | | Fixed warnings that show up with new code contracts version.Andrew Arnott2010-07-033-6/+0
| | | | |
* | | | | Added a legitimate project configuration and its own intermediate directory ↵Andrew Arnott2010-06-242-3/+61
| | | | | | | | | | | | | | | | | | | | for a no-UI version of the DLL.
* | | | | Project can no build optionally without UI controls.Andrew Arnott2010-06-241-23/+29
| | | | |
* | | | | Fixes support for OpenID RP controls' ReturnToUrl property to receive values ↵unknown2010-06-221-3/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | starting with "~/" Fixes Trac #204
* | | | | When the parent window throws an error in an invocation from the child ↵unknown2010-06-211-2/+7
| | | | | | | | | | | | | | | | | | | | window, it no longer prevents the child window from closing itself.
* | | | | Fixed some issues when multiple OpenIdLogin controls are present on the same ↵Andrew Arnott2010-06-171-1/+3
| | | | | | | | | | | | | | | | | | | | page.
* | | | | Fixed NullReferenceException that can occur.Andrew Arnott2010-06-171-0/+1
| | | | |
* | | | | Added regression test for bug fixed in 07ca685b32.Andrew Arnott2010-06-161-0/+4
| | | | |
* | | | | Corrected regression caused by 07ca685b321e.Andrew Arnott2010-06-161-4/+3
| | | | |
* | | | | Fixed exceptions from SimpleUri when handling user-supplied identifiers ↵Andrew Arnott2010-06-151-14/+34
| | | | | | | | | | | | | | | | | | | | given in non-normalized form.
* | | | | Fix for OpenIdLogin.EnableViewState="false" for validation control unhandled ↵Andrew Arnott2010-06-151-4/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | exception. Fixes Trac #201
* | | | | A new ohloh.proj project builds the Ohloh instruct file and upload script ↵Andrew Arnott2010-06-114-2/+155
| | | | | | | | | | | | | | | | | | | | now. Woot.
* | | | | A little cleanup.Andrew Arnott2010-06-111-1/+1
| | | | |
* | | | | Fixed build after code contracts upgrade.Andrew Arnott2010-06-112-15/+18
| | | | |
* | | | | Added documentation for the config setting added in b16ab6be9av3.4.4.10162Andrew Arnott2010-06-111-0/+12
| | | | |
* | | | | Resolved some CC warnings.Andrew Arnott2010-06-102-13/+0
| | | | |
* | | | | Fixed some code contract warnings about contract classes needing to be abstract.Andrew Arnott2010-06-1010-16/+46
| | | | |
* | | | | Resolved build breaks after upgrading Code Contracts.Andrew Arnott2010-06-104-27/+31
| | | | |
* | | | | Added IRequest.ClearResponseExtensions() for OPsAndrew Arnott2010-06-104-1/+51
| | | | | | | | | | | | | | | | | | | | Resolves Trac #181
* | | | | Merge branch 'v3.3' into v3.4Andrew Arnott2010-06-084-8/+9
|\ \ \ \ \ | |/ / / /
| * | | | Merge branch 'v3.2' into v3.3Andrew Arnott2010-06-081-0/+1
| |\ \ \ \ | | |/ / /
| | * | | Made UIRequest serializable, like all the other OpenID extension request ↵Andrew Arnott2010-06-081-0/+1
| | | | | | | | | | | | | | | | | | | | messages.
| * | | | Fixed typo in comments.Andrew Arnott2010-05-153-8/+8
| | | | |
* | | | | Oops... the last fix wasn't quite right.Andrew Arnott2010-06-081-4/+8
| | | | |
* | | | | The enter key no longer suppresses form submit on other forms on the page.Andrew Arnott2010-06-081-10/+10
| | | | | | | | | | | | | | | | | | | | Fixes Trac #200. Thanks for the bug report, Scott Hanselman.
* | | | | OpenIdAjaxOptions now allows an MVC app to specify a form name instead of ↵Andrew Arnott2010-06-083-2/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | only a form index. Thanks Gísli K. Björnsson for the tip.
* | | | | StyleCop fixes.Andrew Arnott2010-06-083-4/+3
| | | | |
* | | | | Merging in interoperability work for Blogger and other lesser OPs.Andrew Arnott2010-06-084-4/+35
|\ \ \ \ \
| * | | | | Put the strictness controls behind a switch so it doesn't require its own ↵Andrew Arnott2010-06-082-1/+26
| | | | | | | | | | | | | | | | | | | | | | | | branch.
| * | | | | Merged in v3.4.3.Andrew Arnott2010-04-1643-284/+1005
| |\ \ \ \ \
| * | | | | | Message parts with constant values are no longer strict about capitalization.Andrew Arnott2010-03-301-1/+1
| | | | | | |
| * | | | | | This allows RPs to allow poor OPs to include empty openid.invalidate_handle ↵Andrew Arnott2010-03-222-3/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | arguments. Blogger issues positive assertions to stateless RPs with empty openid.invalidate_handle parameters.
* | | | | | | Logging now better represents the original (unprocessed) message.Andrew Arnott2010-05-281-1/+1
| | | | | | |
* | | | | | | Fix FxCop message.Andrew Arnott2010-05-281-0/+15
| | | | | | |
* | | | | | | Fix for outgoing check_auth messages so they don't modify positive assertion ↵Andrew Arnott2010-05-2811-34/+166
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | messages causing invalid signatures. Fixes Trac #198
* | | | | | | Stabilized reference paths and removed HintPaths.Andrew Arnott2010-05-282-14/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This is work for targeting .NET 4.0.
* | | | | | | We no longer emit a warning when dropping null keys with null or empty values.Andrew Arnott2010-05-081-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes Trac #194
* | | | | | | StyleCop fixes.Andrew Arnott2010-05-081-2/+1
| | | | | | |
* | | | | | | Fix for UIRequest.Icon deserialization exception due to nullable struct types.Andrew Arnott2010-05-083-6/+44
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes Trac #195
* | | | | | | Merge branch 'v3.3' into v3.4Andrew Arnott2010-05-062-10/+10
|\ \ \ \ \ \ \ | | |_|/ / / / | |/| | | | |
| * | | | | | Merge branch 'v3.2' into v3.3Andrew Arnott2010-05-062-10/+10
| |\ \ \ \ \ \ | | | |_|/ / / | | |/| | | |
| | * | | | | Fixed another bug in AXFetchAsSregTransform that prevented OPs from being ↵Andrew Arnott2010-05-062-10/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | able to respond to AX-carrying auth requests.
* | | | | | | Merge branch 'v3.3' into v3.4Andrew Arnott2010-05-052-8/+4
|\ \ \ \ \ \ \ | |/ / / / / /
| * | | | | | Merge branch 'v3.2' into v3.3Andrew Arnott2010-05-052-8/+4
| |\ \ \ \ \ \ | | |/ / / / /
| | * | | | | Fixed AXFetchAsSregTransform bug that threw an exception at the OP when an ↵Andrew Arnott2010-05-052-7/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | incoming extension contained just an AX extension. Fixes bug reported at http://stackoverflow.com/questions/2724512/dotnetopenauth-openid-provider-sequence-contains-more-than-one-element/2764800
| | * | | | | Fixed OP bug in the AXFetchAsSregTransform that would cause an ↵Andrew Arnott2010-05-051-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | InvalidCastException on anonymous requests.
* | | | | | | Merge branch 'v3.3' into v3.4Andrew Arnott2010-04-307-61/+52
|\ \ \ \ \ \ \ | |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Conflicts: src/DotNetOpenAuth/OpenId/RelyingParty/AssociationManager.cs
| * | | | | | Merge branch 'v3.2' into v3.3Andrew Arnott2010-04-307-61/+52
| |\ \ \ \ \ \ | | |/ / / / / | | | | | | | | | | | | | | | | | | | | | Conflicts: src/DotNetOpenAuth/OpenId/IAssociationStore.cs
| | * | | | | Merge branch 'v3.1' into v3.2Andrew Arnott2010-04-307-61/+52
| | |\ \ \ \ \ | | | | |_|/ / | | | |/| | |
| | | * | | | Merge branch 'v3.0' into v3.1Andrew Arnott2010-04-307-61/+52
| | | |\ \ \ \ | | | | | |_|/ | | | | |/| |
| | | | * | | Moved the VerificationException catch lower in the stack so it catches more ↵Andrew Arnott2010-04-301-11/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | problems.
| | | | * | | Corrected comments.Andrew Arnott2010-04-272-2/+5
| | | | | | |
| | | | * | | Removed the unused ClearExpiredAssociations method.Andrew Arnott2010-03-254-48/+34
| | | | | | |
* | | | | | | Converted the OAuth consumer and SP sample web site projects to web ↵Andrew Arnott2010-04-181-63/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | application projects.
* | | | | | | Incremented to version v3.4.4.Andrew Arnott2010-04-131-1/+1
| |_|_|_|_|/ |/| | | | |
* | | | | | Fixed an occasional unhandled exception.v3.4.3.10103Andrew Arnott2010-04-131-4/+9
| | | | | |
* | | | | | Added logging around certificate verification to try to find perf problem.Andrew Arnott2010-04-111-0/+3
| | | | | |
* | | | | | Marked Flatten as obsolete.Andrew Arnott2010-04-112-2/+5
| | | | | |
* | | | | | Fixed runtime exception caused by recent URI normalization work of the ↵Andrew Arnott2010-04-091-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Identifier class.
* | | | | | Fixed build break that resulted from recent Code Contracts upgrade.Andrew Arnott2010-04-021-1/+1
| | | | | |
* | | | | | Fixed Google Hostmeta discovery module to dispose of open HTTP streams, and ↵Andrew Arnott2010-04-022-49/+57
| | | | | | | | | | | | | | | | | | | | | | | | to limit the length of their result.
* | | | | | StyleCop and FxCop fixes.Andrew Arnott2010-04-0125-182/+296
| | | | | |
* | | | | | Fixed signature verification bugs where claimed_id's have trailing dots in ↵Andrew Arnott2010-03-3014-40/+599
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | path segments, or capital scheme or host names. Merge branch 'dotbug' into v3.4
| * | | | | | Added more fragment tests.Andrew Arnott2010-03-301-1/+9
| | | | | | |
| * | | | | | Fixed equality checks for the problematic URIs, and added a regression test ↵Andrew Arnott2010-03-302-14/+53
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | for it. Also added reporting of full vs. partial trust hosting.
| * | | | | | Added another regression test for this problematic identifiers.Andrew Arnott2010-03-301-0/+21
| | | | | | |
| * | | | | | Added missing documentation for the allowDualPurposeIdentifiers config setting.Andrew Arnott2010-03-301-1/+8
| | | | | | |
| * | | | | | Added log warning message when problematic OpenIDs are encountered by the ↵Andrew Arnott2010-03-306-1/+62
| | | | | | | | | | | | | | | | | | | | | | | | | | | | RP, and a configuration option to enable/disable approximate OpenID discovery for partial trust hosts.
| * | | | | | Added escaping normalization for Path part in SimpleUri class.Andrew Arnott2010-03-302-0/+23
| | | | | | |
| * | | | | | Finished getting a reasonable story for partial trust scenarios with the ↵Andrew Arnott2010-03-306-50/+224
| | | | | | | | | | | | | | | | | | | | | | | | | | | | problematic URI paths.
| * | | | | | Fixed signature verification when claimed_id has capital scheme or host ↵Andrew Arnott2010-03-304-7/+40
| | | | | | | | | | | | | | | | | | | | | | | | | | | | name, or has path segments that end with a period under partial trust.
| * | | | | | A bit of code clean-up and adding comments.Andrew Arnott2010-03-301-9/+16
| | | | | | |
| * | | | | | In full trust environments, it seems that identifiers trailing periods in ↵Andrew Arnott2010-03-302-5/+172
| | | | | | | | | | | | | | | | | | | | | | | | | | | | path segments work now.
| * | | | | | Added another test narrowing down the interoperability problem with Yahoo.Andrew Arnott2010-03-301-0/+22
| | | | | | |
| * | | | | | Slight test adjustment.Andrew Arnott2010-03-302-4/+1
| | |_|_|_|/ | |/| | | |
* | | | | | UI extension request now won't throw on unrecognized values of the mode ↵Andrew Arnott2010-03-301-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | parameter.
* | | | | | Fixes NullReferenceException thrown when the HttpContext.Current is null or ↵Andrew Arnott2010-03-263-3/+32
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | its Session property is null. Fixes Trac #189