Commit Graph

83 Commits

Author SHA1 Message Date
Hao Kung df325deaf3 Add AddAuthentication(defaultScheme) overload 2017-07-07 12:06:00 -07:00
Hao Kung 23da476176 Switch to IOptionsMonitor (#1295) 2017-07-06 13:41:47 -07:00
Hao Kung 1c30f33c92 Remove AddXyzAuth extension methods 2017-07-05 13:00:40 -07:00
Nate McMaster 968237d751 Replace configure method on Twitter, RemoteAuthentication, and OpenIdConnect options with CookieBuilder 2017-07-05 09:56:12 -07:00
Murat Girgin 66b939725e https://github.com/aspnet/Security/issues/1265. Check Auth failures and log them. 2017-07-03 18:04:05 -07:00
Hao Kung ff9f145a8e Refactor Events + Add IAuthenticationBuilder 2017-06-29 16:27:03 -07:00
Javier Calvarro Nelson 879f0b7f40 [Fixes #1133] Limit the path on the nonce and correlation id cookies 2017-06-15 11:23:05 -07:00
Hao Kung 9797d4bc5f Reenable API check 2017-06-12 14:58:11 -07:00
Pranav K 4a258b4565 Remove usage of TaskCache 2017-06-08 09:01:00 -07:00
Hao Kung db9ae62632 IInitializeOptions => IPostConfigureOptions 2017-06-02 14:28:03 -07:00
John Luo c523839078 Update default settings for SameSite
- Need Lax policy for social authentication
- Need None policy for OIDC
2017-05-26 12:19:18 -07:00
Hao Kung e940cdb36b AuthZ 2.0 changes + react to Http 2017-05-25 18:29:19 -07:00
Chris R 30392a1811 Retarget to netstandard2.0 and net461 2017-05-24 19:04:48 -07:00
John Luo 769da5fd87 Add SameSitePolicy to CookiePolicyMiddleware 2017-05-23 09:55:11 -07:00
Hao Kung 1f5a27e20a Switch to Options Initializer 2017-05-17 14:05:27 -07:00
Chris R d84abf1fe6 Migrate to netcoreapp2.0 (#1202)
* Migrate to netcoreapp2.0, remove Microsoft.Owin.Security.Interop & tests.

* Remove net45 baselines
2017-05-04 19:26:44 -07:00
Hao Kung 4f20655850 Set DisplayName for auth 2017-04-20 14:19:32 -07:00
Hao Kung bb73898ca2 Disable api check 2017-04-19 14:14:46 -07:00
Hao Kung 99aa3bd35d Auth 2.0 2017-04-19 13:00:03 -07:00
Pranav K ffa45dbd01 Change compilation targets.
* Remove net451 as a compilation target
* Upgrade to netcoreapp2.0
2017-03-22 06:04:21 -07:00
Nate McMaster 10ef26d63c Consolidate dependency versions into one file and remove workarounds 2017-03-15 18:12:53 -07:00
Nate McMaster 9847f40654
Downgrade to stable packages 2017-02-14 16:15:42 -08:00
Ben Adams fea5d5cfdc Truncate SystemClock to Seconds Precision (#1110) 2017-02-06 14:36:42 -08:00
Nate McMaster 7634c5420a Upgrade to RC.3
Removes __TemporarySources__ to use contentFiles packages
Remove default globs
Update test platform
2017-01-19 22:31:43 -08:00
Nate McMaster 861026cd76 Remove redundant references 2017-01-05 18:16:07 -08:00
Nate McMaster ba8f85d972 Upgrade to VS 2017 2017-01-05 13:53:05 -08:00
Pranav K 7ab28ecdc6 Updating to 4.4 CoreFx packages 2016-12-14 14:47:31 -08:00
Chris R da4730a392 #1044 Revert "Auth: Always call prior handlers during Challenge"
This reverts commit e12838e38f.
2016-12-14 10:55:46 -08:00
Pranav K 46df38de68 Updating versions to 1.2.0-* 2016-11-09 14:19:34 -08:00
jacalvar 82c231efca Created public API baselines 2016-11-08 11:38:53 -08:00
Kiran Challa e55e3b6f5a Updated Authentication's Base64UrlTextEncoder to use WebUtilities's Base64UrlTextEncoder logic 2016-11-01 12:22:42 -07:00
Chris R 2d1c56ce5c #884 Honor OIDC's and Jwt's OnAuthenticationFailed HandleResponse() 2016-10-31 13:48:50 -07:00
Pranav K f64c864911 Updating partner package versions 2016-10-03 14:28:05 -07:00
Chris R 25f39dd0f5 #859 Discriminate between providers when sharing an auth cookie 2016-09-21 16:27:35 -07:00
Hao Kung e12838e38f Auth: Always call prior handlers during Challenge 2016-09-21 11:20:41 -07:00
Pavel Krymets ce0ed3d237 Use TaskCache class from Microsoft.Extensions.TaskCache.Sources (#968)
Instead of Task.FromResult(0)
2016-09-08 10:01:53 -07:00
Troy Dai 3a5df89f1c Move a nullref check to base class 2016-08-26 08:56:48 -07:00
Troy Dai 26956c5ce1 Update OIDC signout flow
OIDC signout should return to CallbackPath then locally redirect to AuthProperties.RedirectUri
2016-08-25 15:23:12 -07:00
Troy Dai 74e5777435 Update comments 2016-08-05 22:00:37 -07:00
Troy Dai 926c7fab4b Use async-wait pattern in HandleAuthenticateOnceSafeAsync 2016-08-05 14:34:36 -07:00
Troy Dai 0314632696 JwtBearer Token: Catch exception during unauthorized flow 2016-08-05 12:11:33 -07:00
Hao Kung 2a6ab2be8c Add UpdateTokenValue API 2016-07-29 13:26:25 -07:00
Troy Dai 763df65c14 Revise if-else order in RemoteAuthenticateHandler 2016-07-26 16:27:28 -07:00
Troy Dai 0d216d726a Minor fixes in RemoteAuthenticationHandler and FacebookHandler 2016-07-26 13:58:07 -07:00
Troy Dai 1c17bddc02 Update HandleRemoteCallbackAsync readability 2016-07-26 10:30:50 -07:00
Troy Dai 210c4b2061 Fix incorrect exception messages 2016-07-26 10:30:50 -07:00
Troy Dai 6f46bc94f8 Sort using statements 2016-07-26 10:30:50 -07:00
Troy Dai 5211f22f44 Update comment on HandleRemoteAuthenticateAsync 2016-07-26 10:30:50 -07:00
Troy Dai cd9e9fa498 Update comment on HandleRemoteAuthenticateAsync 2016-07-26 10:30:50 -07:00
Troy Dai 5de4816f59 Update the RemoteAuthenticationHandler error handling
1. Exeption will be still thrown from CreateTicketAsync to avoid breaking
change.
2. OAuthHandler won't try to capture the exception.
3. OAuthHandler will check if the AuthenticateTicket is null.
4. RemoteAuthenticationHandler's error handling flow is improved to cover
the exception thrown from HandleRemoteAuthenticateAsync. The exeption
thrown from it will go throw the user error handling logic, too.
2016-07-26 10:30:50 -07:00