Hao Kung
df325deaf3
Add AddAuthentication(defaultScheme) overload
2017-07-07 12:06:00 -07:00
Hao Kung
23da476176
Switch to IOptionsMonitor ( #1295 )
2017-07-06 13:41:47 -07:00
Hao Kung
1c30f33c92
Remove AddXyzAuth extension methods
2017-07-05 13:00:40 -07:00
Nate McMaster
968237d751
Replace configure method on Twitter, RemoteAuthentication, and OpenIdConnect options with CookieBuilder
2017-07-05 09:56:12 -07:00
Murat Girgin
66b939725e
https://github.com/aspnet/Security/issues/1265 . Check Auth failures and log them.
2017-07-03 18:04:05 -07:00
Hao Kung
ff9f145a8e
Refactor Events + Add IAuthenticationBuilder
2017-06-29 16:27:03 -07:00
Javier Calvarro Nelson
879f0b7f40
[ Fixes #1133 ] Limit the path on the nonce and correlation id cookies
2017-06-15 11:23:05 -07:00
Hao Kung
9797d4bc5f
Reenable API check
2017-06-12 14:58:11 -07:00
Pranav K
4a258b4565
Remove usage of TaskCache
2017-06-08 09:01:00 -07:00
Hao Kung
db9ae62632
IInitializeOptions => IPostConfigureOptions
2017-06-02 14:28:03 -07:00
John Luo
c523839078
Update default settings for SameSite
...
- Need Lax policy for social authentication
- Need None policy for OIDC
2017-05-26 12:19:18 -07:00
Hao Kung
e940cdb36b
AuthZ 2.0 changes + react to Http
2017-05-25 18:29:19 -07:00
Chris R
30392a1811
Retarget to netstandard2.0 and net461
2017-05-24 19:04:48 -07:00
John Luo
769da5fd87
Add SameSitePolicy to CookiePolicyMiddleware
2017-05-23 09:55:11 -07:00
Hao Kung
1f5a27e20a
Switch to Options Initializer
2017-05-17 14:05:27 -07:00
Chris R
d84abf1fe6
Migrate to netcoreapp2.0 ( #1202 )
...
* Migrate to netcoreapp2.0, remove Microsoft.Owin.Security.Interop & tests.
* Remove net45 baselines
2017-05-04 19:26:44 -07:00
Hao Kung
4f20655850
Set DisplayName for auth
2017-04-20 14:19:32 -07:00
Hao Kung
bb73898ca2
Disable api check
2017-04-19 14:14:46 -07:00
Hao Kung
99aa3bd35d
Auth 2.0
2017-04-19 13:00:03 -07:00
Pranav K
ffa45dbd01
Change compilation targets.
...
* Remove net451 as a compilation target
* Upgrade to netcoreapp2.0
2017-03-22 06:04:21 -07:00
Nate McMaster
10ef26d63c
Consolidate dependency versions into one file and remove workarounds
2017-03-15 18:12:53 -07:00
Nate McMaster
9847f40654
Downgrade to stable packages
2017-02-14 16:15:42 -08:00
Ben Adams
fea5d5cfdc
Truncate SystemClock to Seconds Precision ( #1110 )
2017-02-06 14:36:42 -08:00
Nate McMaster
7634c5420a
Upgrade to RC.3
...
Removes __TemporarySources__ to use contentFiles packages
Remove default globs
Update test platform
2017-01-19 22:31:43 -08:00
Nate McMaster
861026cd76
Remove redundant references
2017-01-05 18:16:07 -08:00
Nate McMaster
ba8f85d972
Upgrade to VS 2017
2017-01-05 13:53:05 -08:00
Pranav K
7ab28ecdc6
Updating to 4.4 CoreFx packages
2016-12-14 14:47:31 -08:00
Chris R
da4730a392
#1044 Revert "Auth: Always call prior handlers during Challenge"
...
This reverts commit e12838e38f .
2016-12-14 10:55:46 -08:00
Pranav K
46df38de68
Updating versions to 1.2.0-*
2016-11-09 14:19:34 -08:00
jacalvar
82c231efca
Created public API baselines
2016-11-08 11:38:53 -08:00
Kiran Challa
e55e3b6f5a
Updated Authentication's Base64UrlTextEncoder to use WebUtilities's Base64UrlTextEncoder logic
2016-11-01 12:22:42 -07:00
Chris R
2d1c56ce5c
#884 Honor OIDC's and Jwt's OnAuthenticationFailed HandleResponse()
2016-10-31 13:48:50 -07:00
Pranav K
f64c864911
Updating partner package versions
2016-10-03 14:28:05 -07:00
Chris R
25f39dd0f5
#859 Discriminate between providers when sharing an auth cookie
2016-09-21 16:27:35 -07:00
Hao Kung
e12838e38f
Auth: Always call prior handlers during Challenge
2016-09-21 11:20:41 -07:00
Pavel Krymets
ce0ed3d237
Use TaskCache class from Microsoft.Extensions.TaskCache.Sources ( #968 )
...
Instead of Task.FromResult(0)
2016-09-08 10:01:53 -07:00
Troy Dai
3a5df89f1c
Move a nullref check to base class
2016-08-26 08:56:48 -07:00
Troy Dai
26956c5ce1
Update OIDC signout flow
...
OIDC signout should return to CallbackPath then locally redirect to AuthProperties.RedirectUri
2016-08-25 15:23:12 -07:00
Troy Dai
74e5777435
Update comments
2016-08-05 22:00:37 -07:00
Troy Dai
926c7fab4b
Use async-wait pattern in HandleAuthenticateOnceSafeAsync
2016-08-05 14:34:36 -07:00
Troy Dai
0314632696
JwtBearer Token: Catch exception during unauthorized flow
2016-08-05 12:11:33 -07:00
Hao Kung
2a6ab2be8c
Add UpdateTokenValue API
2016-07-29 13:26:25 -07:00
Troy Dai
763df65c14
Revise if-else order in RemoteAuthenticateHandler
2016-07-26 16:27:28 -07:00
Troy Dai
0d216d726a
Minor fixes in RemoteAuthenticationHandler and FacebookHandler
2016-07-26 13:58:07 -07:00
Troy Dai
1c17bddc02
Update HandleRemoteCallbackAsync readability
2016-07-26 10:30:50 -07:00
Troy Dai
210c4b2061
Fix incorrect exception messages
2016-07-26 10:30:50 -07:00
Troy Dai
6f46bc94f8
Sort using statements
2016-07-26 10:30:50 -07:00
Troy Dai
5211f22f44
Update comment on HandleRemoteAuthenticateAsync
2016-07-26 10:30:50 -07:00
Troy Dai
cd9e9fa498
Update comment on HandleRemoteAuthenticateAsync
2016-07-26 10:30:50 -07:00
Troy Dai
5de4816f59
Update the RemoteAuthenticationHandler error handling
...
1. Exeption will be still thrown from CreateTicketAsync to avoid breaking
change.
2. OAuthHandler won't try to capture the exception.
3. OAuthHandler will check if the AuthenticateTicket is null.
4. RemoteAuthenticationHandler's error handling flow is improved to cover
the exception thrown from HandleRemoteAuthenticateAsync. The exeption
thrown from it will go throw the user error handling logic, too.
2016-07-26 10:30:50 -07:00