1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
//-----------------------------------------------------------------------
// <copyright file="OpenAuthAuthenticationTicketHelper.cs" company="Microsoft">
// Copyright (c) Microsoft. All rights reserved.
// </copyright>
//-----------------------------------------------------------------------
namespace DotNetOpenAuth.AspNet {
using System;
using System.Diagnostics;
using System.Web;
using System.Web.Security;
using DotNetOpenAuth.AspNet.Resources;
/// <summary>
/// Helper methods for setting and retrieving a custom forms authentication ticket for delegation protocols.
/// </summary>
internal static class OpenAuthAuthenticationTicketHelper {
private const string OpenAuthCookieToken = "OpenAuth";
public static void SetAuthenticationTicket(HttpContextBase context, string userName, bool createPersistentCookie) {
if (!context.Request.IsSecureConnection && FormsAuthentication.RequireSSL) {
throw new HttpException(WebResources.ConnectionNotSecure);
}
HttpCookie cookie = GetAuthCookie(userName, createPersistentCookie);
context.Response.Cookies.Add(cookie);
}
public static bool IsValidAuthenticationTicket(HttpContextBase context) {
HttpCookie cookie = context.Request.Cookies[FormsAuthentication.FormsCookieName];
if (cookie == null) {
return false;
}
string encryptedCookieData = cookie.Value;
if (String.IsNullOrEmpty(encryptedCookieData)) {
return false;
}
try {
FormsAuthenticationTicket authTicket = FormsAuthentication.Decrypt(encryptedCookieData);
return authTicket != null && !authTicket.Expired && authTicket.UserData == OpenAuthCookieToken;
} catch (ArgumentException) {
return false;
}
}
private static HttpCookie GetAuthCookie(string userName, bool createPersistentCookie) {
Debug.Assert(!String.IsNullOrEmpty(userName));
var ticket = new FormsAuthenticationTicket(
/* version */ 2,
userName,
DateTime.Now,
DateTime.Now.Add(FormsAuthentication.Timeout),
createPersistentCookie,
OpenAuthCookieToken,
FormsAuthentication.FormsCookiePath);
string encryptedTicket = FormsAuthentication.Encrypt(ticket);
if (encryptedTicket == null || encryptedTicket.Length < 1) {
throw new HttpException(WebResources.FailedToEncryptTicket);
}
var cookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket) {
HttpOnly = true,
Path = FormsAuthentication.FormsCookiePath,
Secure = FormsAuthentication.RequireSSL
};
if (FormsAuthentication.CookieDomain != null) {
cookie.Domain = FormsAuthentication.CookieDomain;
}
if (ticket.IsPersistent) {
cookie.Expires = ticket.Expiration;
}
return cookie;
}
}
}
|
