Commit Graph

26 Commits

Author SHA1 Message Date
Nate McMaster 968237d751 Replace configure method on Twitter, RemoteAuthentication, and OpenIdConnect options with CookieBuilder 2017-07-05 09:56:12 -07:00
Hao Kung ff9f145a8e Refactor Events + Add IAuthenticationBuilder 2017-06-29 16:27:03 -07:00
Javier Calvarro Nelson 879f0b7f40 [Fixes #1133] Limit the path on the nonce and correlation id cookies 2017-06-15 11:23:05 -07:00
John Luo c523839078 Update default settings for SameSite
- Need Lax policy for social authentication
- Need None policy for OIDC
2017-05-26 12:19:18 -07:00
Hao Kung e940cdb36b AuthZ 2.0 changes + react to Http 2017-05-25 18:29:19 -07:00
John Luo 769da5fd87 Add SameSitePolicy to CookiePolicyMiddleware 2017-05-23 09:55:11 -07:00
Hao Kung 1f5a27e20a Switch to Options Initializer 2017-05-17 14:05:27 -07:00
Hao Kung 99aa3bd35d Auth 2.0 2017-04-19 13:00:03 -07:00
Chris R 2d1c56ce5c #884 Honor OIDC's and Jwt's OnAuthenticationFailed HandleResponse() 2016-10-31 13:48:50 -07:00
Chris R 25f39dd0f5 #859 Discriminate between providers when sharing an auth cookie 2016-09-21 16:27:35 -07:00
Troy Dai 26956c5ce1 Update OIDC signout flow
OIDC signout should return to CallbackPath then locally redirect to AuthProperties.RedirectUri
2016-08-25 15:23:12 -07:00
Troy Dai 763df65c14 Revise if-else order in RemoteAuthenticateHandler 2016-07-26 16:27:28 -07:00
Troy Dai 0d216d726a Minor fixes in RemoteAuthenticationHandler and FacebookHandler 2016-07-26 13:58:07 -07:00
Troy Dai 1c17bddc02 Update HandleRemoteCallbackAsync readability 2016-07-26 10:30:50 -07:00
Troy Dai 210c4b2061 Fix incorrect exception messages 2016-07-26 10:30:50 -07:00
Troy Dai 6f46bc94f8 Sort using statements 2016-07-26 10:30:50 -07:00
Troy Dai 5211f22f44 Update comment on HandleRemoteAuthenticateAsync 2016-07-26 10:30:50 -07:00
Troy Dai cd9e9fa498 Update comment on HandleRemoteAuthenticateAsync 2016-07-26 10:30:50 -07:00
Troy Dai 5de4816f59 Update the RemoteAuthenticationHandler error handling
1. Exeption will be still thrown from CreateTicketAsync to avoid breaking
change.
2. OAuthHandler won't try to capture the exception.
3. OAuthHandler will check if the AuthenticateTicket is null.
4. RemoteAuthenticationHandler's error handling flow is improved to cover
the exception thrown from HandleRemoteAuthenticateAsync. The exeption
thrown from it will go throw the user error handling logic, too.
2016-07-26 10:30:50 -07:00
Troy Dai 988bcc81ee Update comments for HandleRemoteAuthenticateAsync method 2016-07-26 10:30:50 -07:00
Derek 6cd46a5c10 Remote auth expiration fix (#893)
Remote auth expiration fix, and move ISystemClock to the base AuthenticationProperties
2016-07-19 15:18:42 -07:00
Chris R 59fc691f41 #667 #801 Handle authorize and forbid for redirecting handlers. 2016-05-23 10:50:50 -07:00
Kiran Challa 6d4a80e747 [Fixes #532] Replace hard-coded logging event ids with a class of consts 2016-03-24 07:11:53 -07:00
Kévin Chalet bbcabc0212 Move GenerateCorrelationId and ValidateCorrelationId to RemoteAuthenticationHandler 2016-02-08 11:37:49 -08:00
N. Taylor Mullen c0d587e7c2 Rename AspNet 5 file contents.
See https://github.com/aspnet/Announcements/issues/144 for more information.
2016-01-22 12:35:47 -08:00
N. Taylor Mullen ba757d7a45 Rename AspNet 5 folders and files.
See https://github.com/aspnet/Announcements/issues/144 for more information.
2016-01-22 12:16:26 -08:00