Nate McMaster
968237d751
Replace configure method on Twitter, RemoteAuthentication, and OpenIdConnect options with CookieBuilder
2017-07-05 09:56:12 -07:00
Hao Kung
ff9f145a8e
Refactor Events + Add IAuthenticationBuilder
2017-06-29 16:27:03 -07:00
Javier Calvarro Nelson
879f0b7f40
[ Fixes #1133 ] Limit the path on the nonce and correlation id cookies
2017-06-15 11:23:05 -07:00
John Luo
c523839078
Update default settings for SameSite
...
- Need Lax policy for social authentication
- Need None policy for OIDC
2017-05-26 12:19:18 -07:00
Hao Kung
e940cdb36b
AuthZ 2.0 changes + react to Http
2017-05-25 18:29:19 -07:00
John Luo
769da5fd87
Add SameSitePolicy to CookiePolicyMiddleware
2017-05-23 09:55:11 -07:00
Hao Kung
1f5a27e20a
Switch to Options Initializer
2017-05-17 14:05:27 -07:00
Hao Kung
99aa3bd35d
Auth 2.0
2017-04-19 13:00:03 -07:00
Chris R
2d1c56ce5c
#884 Honor OIDC's and Jwt's OnAuthenticationFailed HandleResponse()
2016-10-31 13:48:50 -07:00
Chris R
25f39dd0f5
#859 Discriminate between providers when sharing an auth cookie
2016-09-21 16:27:35 -07:00
Troy Dai
26956c5ce1
Update OIDC signout flow
...
OIDC signout should return to CallbackPath then locally redirect to AuthProperties.RedirectUri
2016-08-25 15:23:12 -07:00
Troy Dai
763df65c14
Revise if-else order in RemoteAuthenticateHandler
2016-07-26 16:27:28 -07:00
Troy Dai
0d216d726a
Minor fixes in RemoteAuthenticationHandler and FacebookHandler
2016-07-26 13:58:07 -07:00
Troy Dai
1c17bddc02
Update HandleRemoteCallbackAsync readability
2016-07-26 10:30:50 -07:00
Troy Dai
210c4b2061
Fix incorrect exception messages
2016-07-26 10:30:50 -07:00
Troy Dai
6f46bc94f8
Sort using statements
2016-07-26 10:30:50 -07:00
Troy Dai
5211f22f44
Update comment on HandleRemoteAuthenticateAsync
2016-07-26 10:30:50 -07:00
Troy Dai
cd9e9fa498
Update comment on HandleRemoteAuthenticateAsync
2016-07-26 10:30:50 -07:00
Troy Dai
5de4816f59
Update the RemoteAuthenticationHandler error handling
...
1. Exeption will be still thrown from CreateTicketAsync to avoid breaking
change.
2. OAuthHandler won't try to capture the exception.
3. OAuthHandler will check if the AuthenticateTicket is null.
4. RemoteAuthenticationHandler's error handling flow is improved to cover
the exception thrown from HandleRemoteAuthenticateAsync. The exeption
thrown from it will go throw the user error handling logic, too.
2016-07-26 10:30:50 -07:00
Troy Dai
988bcc81ee
Update comments for HandleRemoteAuthenticateAsync method
2016-07-26 10:30:50 -07:00
Derek
6cd46a5c10
Remote auth expiration fix ( #893 )
...
Remote auth expiration fix, and move ISystemClock to the base AuthenticationProperties
2016-07-19 15:18:42 -07:00
Chris R
59fc691f41
#667 #801 Handle authorize and forbid for redirecting handlers.
2016-05-23 10:50:50 -07:00
Kiran Challa
6d4a80e747
[ Fixes #532 ] Replace hard-coded logging event ids with a class of consts
2016-03-24 07:11:53 -07:00
Kévin Chalet
bbcabc0212
Move GenerateCorrelationId and ValidateCorrelationId to RemoteAuthenticationHandler
2016-02-08 11:37:49 -08:00
N. Taylor Mullen
c0d587e7c2
Rename AspNet 5 file contents.
...
See https://github.com/aspnet/Announcements/issues/144 for more information.
2016-01-22 12:35:47 -08:00
N. Taylor Mullen
ba757d7a45
Rename AspNet 5 folders and files.
...
See https://github.com/aspnet/Announcements/issues/144 for more information.
2016-01-22 12:16:26 -08:00