Commit Graph

563 Commits

Author SHA1 Message Date
Troy Dai 926c7fab4b Use async-wait pattern in HandleAuthenticateOnceSafeAsync 2016-08-05 14:34:36 -07:00
Troy Dai 0314632696 JwtBearer Token: Catch exception during unauthorized flow 2016-08-05 12:11:33 -07:00
Christian Weiss 706566e253 Typo "Failed to retrived" -> "Failed to retrieve" 2016-08-04 18:02:09 +02:00
Hao Kung 2a6ab2be8c Add UpdateTokenValue API 2016-07-29 13:26:25 -07:00
Ryan Brandenburg c16fc06cb9 Modify warning about policy behavior (#924) 2016-07-28 16:55:08 -07:00
Troy Dai 763df65c14 Revise if-else order in RemoteAuthenticateHandler 2016-07-26 16:27:28 -07:00
Troy Dai 0e855b25a8 Update Google and Microsoft Account Handler exception message 2016-07-26 14:16:16 -07:00
Troy Dai 0d216d726a Minor fixes in RemoteAuthenticationHandler and FacebookHandler 2016-07-26 13:58:07 -07:00
Troy Dai 1c17bddc02 Update HandleRemoteCallbackAsync readability 2016-07-26 10:30:50 -07:00
Troy Dai 210c4b2061 Fix incorrect exception messages 2016-07-26 10:30:50 -07:00
Troy Dai 6f46bc94f8 Sort using statements 2016-07-26 10:30:50 -07:00
Troy Dai 5211f22f44 Update comment on HandleRemoteAuthenticateAsync 2016-07-26 10:30:50 -07:00
Troy Dai cd9e9fa498 Update comment on HandleRemoteAuthenticateAsync 2016-07-26 10:30:50 -07:00
Troy Dai 5de4816f59 Update the RemoteAuthenticationHandler error handling
1. Exeption will be still thrown from CreateTicketAsync to avoid breaking
change.
2. OAuthHandler won't try to capture the exception.
3. OAuthHandler will check if the AuthenticateTicket is null.
4. RemoteAuthenticationHandler's error handling flow is improved to cover
the exception thrown from HandleRemoteAuthenticateAsync. The exeption
thrown from it will go throw the user error handling logic, too.
2016-07-26 10:30:50 -07:00
Troy Dai 988bcc81ee Update comments for HandleRemoteAuthenticateAsync method 2016-07-26 10:30:50 -07:00
Troy Dai 312edaafb4 Handle back channel failure gracefully
1. Check the response states code. If it is out of 2XX range, compose a
readable message and throw in an exception.
2. Capture the exception in HandleRemoteAuthenticateAsync and translate
it into AuthenticateResult.
2016-07-26 10:30:50 -07:00
Troy Dai ecb3b90984 Undo change to the GoogleDefaults 2016-07-26 09:19:42 -07:00
Troy Dai eabdd45816 Improve code readability for Authentication.Google 2016-07-26 09:13:18 -07:00
Troy Dai 7b7da43fd8 Update comments in RemoteAuthenticationOptions 2016-07-25 20:33:12 -07:00
Ryan Brandenburg 651815c282 Remove OfType allocations (#906) 2016-07-25 16:31:27 -07:00
Derek 6cd46a5c10 Remote auth expiration fix (#893)
Remote auth expiration fix, and move ISystemClock to the base AuthenticationProperties
2016-07-19 15:18:42 -07:00
Troy Dai 4927ad6b74 Remove win32.cs 2016-07-14 16:24:56 -07:00
Troy Dai 5637e0c917 Remove unused using statements 2016-07-14 16:24:48 -07:00
Doug Bunting 792b316950 One build to rule them all
- well, at least VS and command-line builds will share output
- part of aspnet/Coherence-Signed#277
2016-07-07 12:40:05 -07:00
Kévin Chalet b4342b1604 Replace magic strings by the new constants introduced in IdentityModel 2016-06-17 10:43:24 -07:00
Pranav K d8d408638e Updating to dev versions
# Conflicts:
#	src/Microsoft.AspNetCore.Authentication.OAuth/project.json
#	src/Microsoft.AspNetCore.Authentication.Twitter/project.json
2016-06-16 11:31:40 -07:00
jacalvar 20316e276c Update Json.NET to 9.0.1 2016-06-15 15:19:11 -07:00
Hao Kung 666ad0fc3b Doc comment update 2016-06-13 14:10:43 -07:00
Hao Kung 34ee0212d0 Fix misc feedback 2016-06-10 15:37:08 -07:00
Barry Dorrans 38e89d498d Doc Comments 2016-06-09 16:15:09 -07:00
jacalvar e1495f5f32 Remove unncessary usings 2016-06-09 00:48:37 -07:00
jacalvar 933b374f3e Update Json.NET to 9.0.1-beta1 2016-06-06 21:26:53 -07:00
Pranav K bffbfc7f9e React to OpenId renames 2016-06-04 18:53:09 -07:00
Kévin Chalet 120021e8a3 Add a new IncludeErrorDetails option to prevent the JWT middleware from returning error/error_description 2016-06-03 22:46:00 +02:00
Hao Kung 35d0592701 Make AuthorizationHandler<TReq> async only 2016-06-03 13:26:16 -07:00
Kévin Chalet 56dca7e0bc Add a 'sid' check to the OIDC middleware to prevent unsolicited logout when possible 2016-06-02 12:21:17 -07:00
Chris R e299695974 #776 Show some JwtBearer errors in response headers 2016-06-01 07:10:16 -07:00
Hao Kung c257c9528f AuthZ: Combine needs to use policy provider
Fixes https://github.com/aspnet/Security/issues/841
2016-05-31 13:45:48 -07:00
Chris R 080447e9aa #780 Remove obsolete DateTime conversions 2016-05-27 15:29:40 -07:00
Chris R d6763bd77c #423 Support distributed sign-out. 2016-05-27 14:51:53 -07:00
John Luo e57e01d02c React to updated CoreCLR packages
https://github.com/aspnet/Coherence/issues/97
2016-05-26 18:25:05 -07:00
Chris R 2634fe318d #814 Rework CookieAuth for compat with CookiePolicy. 2016-05-26 14:20:15 -07:00
Chris R 59fc691f41 #667 #801 Handle authorize and forbid for redirecting handlers. 2016-05-23 10:50:50 -07:00
Hao Kung db7009531a Update google token endpoint to v4 2016-05-23 10:31:36 -07:00
Hao Kung bfbe7ec15d Update fb to v2.6 2016-05-23 10:31:36 -07:00
Pranav K 4c27df166b Revert "React to updated CoreCLR packages"
This reverts commit 621ccf889c.
2016-05-18 09:40:51 -07:00
John Luo 621ccf889c React to updated CoreCLR packages
https://github.com/aspnet/Coherence/issues/97
2016-05-17 14:34:03 -07:00
BrennanConroy 962a74c488 Add argument validation 2016-05-16 15:19:58 -07:00
Chris R 6294badd97 Use a shared CookieSecurePolicy. 2016-05-16 12:29:33 -07:00
BrennanConroy 1a99fad0c6 Rename AuthorizationContext 2016-05-16 09:30:33 -07:00
Chris R d814cef75a Merge branch 'release' into dev 2016-05-03 10:09:44 -07:00
Chris R 7645253420 #808 Update OIDC to v1.0 2016-05-03 09:39:36 -07:00
Pranav K cf75a0f793 Merge branch 'release' into dev 2016-05-02 14:57:21 -07:00
Pranav K f6cdb9faf9 Fix build warnings 2016-05-02 11:27:26 -07:00
Petr Onderka ba8c0c5018 Removed space from file name
This caused broken link in API reference
2016-04-28 15:40:59 -07:00
Chris R 0bce133ee4 #765 Retrieve the email address from Twitter. 2016-04-28 10:19:30 -07:00
Chris R 0cd7c7236b React to FormReader api change. 2016-04-25 12:15:04 -07:00
Kiran Challa 6e3ff403d4 [Fixes #794] Exception thrown when 'Microsoft.AspNetCore.Authentication.JwtBearer' tries to log a message 2016-04-22 09:55:13 -07:00
Chris R c06cac5d30 #744 Change OIDC's default ResponseType to IdToken. 2016-04-21 14:46:40 -07:00
BrennanConroy 3db1f1e9fd Move dependency to netstandard only 2016-04-14 15:41:40 -07:00
BrennanConroy 8023d1eb02 Add serialization.primitives for Newtonsoft.Json 2016-04-14 13:52:39 -07:00
Pranav K a41c578d88 Removing imports from src projects 2016-04-08 06:49:18 -07:00
Hao Kung 5cd236c1b0 Guard against null ref 2016-04-01 14:16:49 -07:00
Hao Kung 4d6ad51f8a Add fallback logging for username in AuthZ 2016-03-31 13:09:32 -07:00
Doug Bunting 16a0482238 React to HttpAbstractions namespace changes
- aspnet/HttpAbstractions#549 and aspnet/HttpAbstractions#592
- clean up `using`s
2016-03-30 16:15:37 -07:00
jacalvar 4086d70628 Add comments to AddAuthentication extension methods 2016-03-28 15:44:15 -07:00
Chris R 3f596108aa #690 OIDC & JWT event refactoring. 2016-03-25 10:08:33 -07:00
Kiran Challa 6d4a80e747 [Fixes #532] Replace hard-coded logging event ids with a class of consts 2016-03-24 07:11:53 -07:00
Pranav K 7ec3da701c Reacting to CoreFx package changes 2016-03-23 16:15:16 -07:00
Pranav K 22d133cefa Reacting to CoreCLR package changes 2016-03-22 14:51:18 -07:00
Doug Bunting 9361960b2f React to HttpAbstractions change: No features in `.Internal` namespace
- see issue aspnet/HttpAbstractions#561 and pull aspnet/HttpAbstractions#589
2016-03-18 08:35:57 -07:00
Doug Bunting 81bf1c2096 Cleanup transitive dependencies 2016-03-17 22:23:23 -07:00
Ajay Bhargav Baaskaran 1a8d5317a9 Updated Json.Net version 2016-03-14 14:50:57 -07:00
Dovydas Navickas f5c1c45db2 IClaimsTransofrmer updated to take ClaimsTransformationContext instead of ClaimsPrincipal in TransformAsync method. #718 2016-03-11 14:07:56 -08:00
Eilon Lipton 4bfeba2a3c Update project.json
@tratcher said :shipit:
2016-03-10 15:16:54 -08:00
Eilon Lipton d78f7edfc7 Fix package metadata
And also a few other Core-related renames.
2016-03-09 23:14:51 -08:00
Chris R a5fcddc0a8 #704 unregister auth handlers during unwind. 2016-03-09 09:45:59 -08:00
Mike Surcouf 553e036d28 Add GivenName and Surname default claims to FacebookOptions 2016-03-09 11:04:11 +00:00
Ajay Bhargav Baaskaran 9dfe4d9699 Enabled xml doc generation 2016-03-04 15:49:20 -08:00
Hao Kung ef6dd41384 SaveTokens in OIDC 2016-03-04 12:55:32 -08:00
Osman M Elsayed 8645ca0dc5 Update MicrosoftAccount to use converged auth
-Updated MicrosoftAccountDefaults to use app model v2 & graph API
-Updated MicrosoftAccountHelper to extract user info from the user object
returned by the graph API
-Updated MicrosoftAccountMiddlewareTests accordingly
-Added the app model v2 client credentials to SocialSample/config.json
-Configured SocialSample to use SSL

Startup.cs
- Sorted namespaces
- Dropped openid scope from Microsoft-AccessToken
project.json
- Sorted dependencies
MicrosoftAccountHelper.cs
- Removed name claim transofmation
- renamed GetName, GetFirstName & GetLastName
2016-03-04 11:52:43 -08:00
Ajay Bhargav Baaskaran 94e0088eea Added Company, Copyright and Product attributes to AssemblyInfo 2016-03-03 17:33:22 -08:00
Hao Kung ace166fa31 Save tokens in auth properties instead of claims 2016-03-03 12:50:46 -08:00
Pranav K cedef4dcba Fix build break 2016-03-03 06:39:15 -08:00
Doug Bunting fbb628298c Remove project name from output path
- aspnet/Coherence-Signed#187
- remove `<RootNamespace>` settings but maintain other unique aspects e.g. `<DnxInvisibleContent ... />`
- in a few cases, standardize on VS version `14.0` and not something more specific
2016-03-02 21:20:11 -08:00
Hao Kung b5300ad0e4 Update doc comments 2016-03-02 13:46:47 -08:00
N. Taylor Mullen e3979fd3fe Transition to netstandard.
- dotnet5.X => netstandard1.y (where y = x-1).
- DNXCore50 => netstandardapp1.5.
- Applied the same changes to ifdefs.
2016-03-01 13:36:53 -08:00
Chris R 9bbbe535f2 #690 Enable custom OIDC authorization code redemption. 2016-02-19 15:07:25 -08:00
Chris R 34bc9c52e1 #456 Unify OIDC Code/IdToken/Hybride flows. 2016-02-08 12:06:13 -08:00
Kévin Chalet bbcabc0212 Move GenerateCorrelationId and ValidateCorrelationId to RemoteAuthenticationHandler 2016-02-08 11:37:49 -08:00
N. Taylor Mullen bafb097e9f Update to new CLI.
- Added appropriate imports/net core platform libraries.
2016-02-06 19:51:50 -08:00
Ajay Bhargav Baaskaran c2194ea99d Updated Json.Net versions 2016-02-05 10:21:39 -08:00
Mike Surcouf e00453af4d Ensure scope has no duplicates 2016-02-04 09:08:03 +00:00
Mike Surcouf e737f3207e Remove username from Facebook
Add default fields for Facebook

Remove default fields except name and email

Add all the core fields for Facebook

Fix location and field uniqueness
2016-02-02 11:58:08 -08:00
Hao Kung 80dc5759cc Async overloads for AuthZ RequireAssertion 2016-01-28 12:48:00 -08:00
Chris R a80c5e6d85 #614 Standardize the pattern for scope defaults. 2016-01-27 15:26:32 -08:00
Brennan 297c72aa21 React to Logging API changes 2016-01-27 14:42:56 -08:00
Hao Kung 00ceeb0262 Add IAuthorizationPolicyProvider support 2016-01-27 13:36:53 -08:00
Chris R 9c41eb958e React to IdentityModel breaking change. 2016-01-26 14:28:49 -08:00
David Fowler a1aeb4313e Remove unused dependency
- The authorization stack doesn't depend on AspNetCore at all really
2016-01-24 23:57:17 -08:00
Chris R 0c6a805405 #632 Save twitters access token secret as a claim. 2016-01-24 18:45:04 -08:00
Chris R 38de3d6013 #526 Change from storing expires_in to calculating expires_at. 2016-01-24 18:45:02 -08:00
N. Taylor Mullen a5b288897d Update ASP.NET 5 versions for ASP.NET Core.
See https://github.com/aspnet/Announcements/issues/144 for more information.
2016-01-22 12:39:16 -08:00
N. Taylor Mullen c0d587e7c2 Rename AspNet 5 file contents.
See https://github.com/aspnet/Announcements/issues/144 for more information.
2016-01-22 12:35:47 -08:00
N. Taylor Mullen ba757d7a45 Rename AspNet 5 folders and files.
See https://github.com/aspnet/Announcements/issues/144 for more information.
2016-01-22 12:16:26 -08:00
Chris R de2cb12f5c OIDC cleanup 2016-01-21 17:14:15 -08:00
Hao Kung 2e1a8b31cd Rename Delegate => AssertionRequirement
And moar sugar...
2016-01-15 14:47:33 -08:00
John Luo 417ca6cbe3 Updating to new options pattern 2016-01-08 16:53:31 -08:00
Chris R 990e412326 Actually fix the AssemblyInfo 2016-01-08 14:47:40 -08:00
Kévin Chalet f4aafe04e0 Replace Microsoft.Owin.Security.Cookies.Interop by Microsoft.Owin.Security.Interop 2016-01-08 13:43:43 -08:00
Hao Kung 5bcc1bfc26 Also refresh expires/Issues when renewing cookie 2016-01-08 13:22:55 -08:00
Hao Kung 7a23028527 Switch to AuthenticationTicket in OAuth event 2016-01-05 15:46:58 -08:00
Chris R 2a939287bc Merge pull request #636 from npnelson/dev
Fix Typo in a Log Message
2016-01-05 15:27:47 -08:00
Hao Kung 3257a82367 Expose AuthenticationProperties in events 2016-01-05 14:32:31 -08:00
Hao Kung f195ed3bab Allow value type resources for AuthZ 2016-01-04 13:30:40 -08:00
Nicholas Nelson 74961cac49 fix typo in log message HttContext.User merged...=>HttpContext.User merged 2015-12-30 16:50:42 -05:00
Vincent Lainé 9bf861307c Rework the empty or space only filtering in Roles and Schemes 2015-12-30 12:04:00 +01:00
Vincent Lainé 9a5da5861b Fix coding style and handle case where empty roles & schemes are empty 2015-12-28 23:57:42 +01:00
Vincent Lainé 6850e3b3b6 Fix missing Trim in Roles and Schemes split 2015-12-28 14:47:15 +01:00
John Luo 2d21b72561 Adding back middleware initialization with options instance. 2015-12-23 15:26:41 -08:00
John Luo 5837ce160a Stardardizing middleware to use ConfigureOption lambda 2015-12-22 21:34:52 -08:00
Hao Kung 84279c07cf OptionsModel => Options rename 2015-12-21 15:02:14 -08:00
Chris R e4df43611d React to IdentityModel namespace changes. 2015-12-20 19:44:21 -08:00
Chris R 0623f3b741 #555 Make SkipToNextMiddleware work on events. 2015-12-09 15:26:47 -08:00
John Luo 4c1943b281 Reacting to verbose rename 2015-12-07 14:28:28 -08:00
Hao Kung f24c35f1a9 Promote SaveTokensAsClaims to RemoteAuthOptions 2015-12-07 13:37:56 -08:00
Chris R 3d8886a064 #566 Update Google token endpoint. 2015-12-03 10:43:31 -08:00
Chris R 92c479869b #600 Update the Twitter AuthenticationEndpoint 2015-12-02 11:51:43 -08:00
Chris R a18181d363 #565 Update facebook APIs to v2.5. 2015-12-02 10:43:17 -08:00
Pranav K b81f947042 Remove unused references 2015-12-01 10:55:47 -08:00
Pranav K 0db9a16c91 Use the newest build of OpenIdConnect packages cloned to AspNet feeds.
Fixes #576
2015-12-01 10:38:42 -08:00
Chris R 4cf32eb678 #411 Handle validation failures from ValidateToken. 2015-11-30 11:56:57 -08:00
Hao Kung 620622f260 Include error_desc/error_uri as well for OAuth 2015-11-19 15:06:20 -08:00
Hao Kung de107ffe61 Cookies now defaults to AutomaticAuthenticate true again 2015-11-13 11:27:39 -08:00
Ajay Bhargav Baaskaran b05f8771ae Removed comment 2015-11-12 15:23:30 -08:00
N. Taylor Mullen d6cdb4bbfe Remove System beta tag in project.json for coreclr packages. 2015-11-12 12:24:08 -08:00
Cesar Blum Silveira 8a23efebf2 Merge branch 'release' into dev 2015-11-05 11:51:33 -08:00
Cesar Blum Silveira bcb02a06ef Update IdentityModel dependencies to strong named version. 2015-11-05 11:50:33 -08:00
Hao Kung dc6e916bd4 Cookies Forbid now includes ReturnUrl 2015-11-04 13:54:37 -08:00
Hao Kung 238fdf24e8 Further improve error handling for OAuth providers 2015-11-03 12:37:35 -08:00
Cesar Blum Silveira a363368dc8 Strong name everything. 2015-11-03 12:29:44 -08:00
Chris R e9d2c53ebc React to IRequestCookieCollection changes. 2015-11-02 15:56:49 -08:00
John Luo c71c7a3810 Reacting to RequestDelegate namespace change 2015-10-30 14:14:34 -07:00
Chris R 1a59b385a0 React to WebEncoders changes. 2015-10-30 11:39:39 -07:00
Chris R 57a64298c0 #485 OIDC RequireHttpsMetadata 2015-10-23 15:33:48 -07:00
Ryan Nowak 9c9cf3d314 React to break change in StringValues 2015-10-23 15:13:30 -07:00
Hao Kung 204ab0b860 Fix build break 2015-10-23 14:56:17 -07:00
Hao Kung 1d2c6ba122 Cookies no longer redirects for AJAX requests 2015-10-23 14:39:42 -07:00
Chris R 35b7248734 #455 Remove RedirectUri from OIDC, use CallbackPath. 2015-10-22 14:56:15 -07:00
Pranav K 5566433686 Switching to generations TFMs 2015-10-22 00:35:50 -07:00
Hao Kung 0eaec216b1 AuthZ API review changes 2015-10-21 16:45:20 -07:00
Hao Kung 7dfac2fd78 Add assembly info for new project 2015-10-21 15:23:39 -07:00
Hao Kung e72a563902 Add initial Owin Security cookie interop package 2015-10-21 15:19:16 -07:00
Hao Kung defc9faac0 Don't call resource handlers without required resource 2015-10-21 13:18:05 -07:00
Chris R ef61b14d6a #501 Replace OpenIdConnectTokenEndpointResponse with an OpenIdConnectMessage 2015-10-21 12:26:01 -07:00
Pranav K 00c81d41aa Use fixed version of OpenIdConnect 2015-10-21 11:24:10 -07:00
Hao Kung 2b259e8b99 Remove deprecated AddCookieAuthentication methods 2015-10-20 13:56:40 -07:00
Hao Kung e0464c9508 Add some basic logging to AuthZ/N 2015-10-20 13:47:59 -07:00
Eilon Lipton fd54c5af21 Add lots of missing doc comments.
Also did some minor renames to match extension method patterns.
2015-10-19 13:02:05 -07:00
Ajay Bhargav Baaskaran 0f78135f5d Moving AllowAnonymous attribute from MVC 2015-10-19 11:02:20 -07:00
Eilon Lipton 121e6891e7 Remove log codes from exception/log messages; don't localize logs
https://github.com/aspnet/Security/issues/414 and
https://github.com/aspnet/Security/issues/418

Also started putting in event ids for logs.
2015-10-17 16:50:16 -07:00
Chris R c14119b612 #263 Consume ITlsTokenBindingFeature in CookieAuthMiddleware. 2015-10-16 16:31:58 -07:00
Chris R f588677bb4 #506 Update to Rc1 IdentityModel, update ValidateUserInfoEndpointResponse. 2015-10-16 12:11:54 -07:00
Eilon Lipton 3c925fc4bf Fix package descriptions with proper casing
#468
2015-10-15 22:30:11 -07:00
Hao Kung 8359038927 Address remaining PR feedback + misc cleanup 2015-10-15 16:51:12 -07:00
Hao Kung 409b50269a Add RemoteAuthenticationHandler base/error handling logic 2015-10-14 23:08:43 -07:00
Pranav K 6c529eae7a Renaming Microsoft.Framework.* -> Microsoft.Extensions.* 2015-10-03 15:44:47 -07:00
Pranav K 6ed7d1f3c0 Replace NotNullAttribute with thrown exceptions 2015-09-29 09:35:27 -07:00
Chris R 78cf065b88 #493 Upate to IdentityModel beta8 dependencies. 2015-09-28 18:25:13 -07:00
Hao Kung 852f44a369 Rename JwtBearer events 2015-09-24 14:53:31 -07:00
Chris R 966fa6672f #147 Make OIDC UseTokenLifetime false by default. 2015-09-24 10:18:04 -07:00
Kévin Chalet 8c1cb911f2 Refactor TicketSerializer/PropertiesSerializer and add ClaimsIdentity.Actor/Claim.Properties support 2015-09-24 10:08:22 -07:00
Hao Kung e091bceaa8 Caption => DisplayName 2015-09-23 15:02:03 -07:00
Kévin Chalet 742b96d18c Port SaveTokensAsClaims to the OpenID Connect middleware and automatically flow id_token_hint on logout requests 2015-09-23 14:33:30 -07:00
Hao Kung 1ef66c9c11 Fix stuff 2015-09-22 16:48:50 -07:00
Hao Kung a55a372476 Add period 2015-09-22 16:21:40 -07:00
Hao Kung 644a4002a9 Rename back to jwtBearer 2015-09-22 14:09:41 -07:00
Hao Kung b189475551 Split cookie events 2015-09-21 17:12:21 -07:00
Hao Kung fec3002fff Renames 2015-09-21 16:32:14 -07:00
Hao Kung 59ccbdd8ca Fix stuff 2015-09-21 14:56:05 -07:00
Hao Kung 081577e4f4 Remove usage IOptions from middleware ctors 2015-09-18 12:24:33 -07:00
Hao Kung 5cc1fea400 Add CookiePolicy Middleware 2015-09-17 15:37:15 -07:00
Chris R 1c0768fb71 #372 Flow mutable event state.
#358 Add a UserInformationReceived event.
#327 Add AuthenticationCompleted event.
#340 Split the Redirect event for Authentication and SignOut.
Rename OnAuthorizationCodeRedeemed to OnTokenResponseReceived.
Move IdTokenReceived to AuthorizationResponseReceived.
Rename IdTokenValidated to AuthenticationValidated.
2015-09-16 14:31:36 -07:00
Chris R ee2d263223 #434 Remove the nonce cache. 2015-09-15 09:13:26 -07:00
Hao Kung e8090a3176 Remove authentication from names, async events 2015-09-14 14:54:51 -07:00
Pranav K 0f06b6a09a Adding NeutralResourcesLanguageAttribute 2015-09-10 18:31:59 -07:00
Chris R 2982d743d8 #443 Remove custom certificate validators. 2015-09-10 08:41:08 -07:00
Chris R ebcad24307 #404 Verify state via independent cookie. 2015-09-09 12:16:22 -07:00
Chris R 9f7a723843 #390 Make the nonce cookie expire. 2015-09-09 11:55:14 -07:00
Hao Kung 5bc13cbd6b UseOauth now requires an instance of options 2015-09-09 11:05:14 -07:00
Chris R 76fd055d8e Remove redundant body rewind. 2015-09-08 14:14:39 -07:00
Ryan Nowak 831785fe9f Make AddAuthorization() idempotent
Found this issue which looking into making AddMvc() idempotent. You'll end
up with multiple pass-through handlers registered if two components call
AddAuthorization(). This is very possible to happen if used two frameworks
in the same app.
2015-09-04 08:26:54 -07:00
Chris R d2701f4897 #58 Serialize the ClaimsIdentity.BootstrapContext. 2015-09-03 17:25:56 -07:00
Chris R dda67b9d7c Remove unused RedirectFromIdentityProviderContext. 2015-09-03 12:39:36 -07:00
Chris R 47520e126e #47 Standardize on I*Events pattern. 2015-09-03 11:02:19 -07:00
Chris R 2aba485263 Move Context objects to OIDC and JwtBearer, remove generics. 2015-09-02 17:01:25 -07:00
Chris R e4f78176f9 Regenerate Resources.Designer.cs using the standard tooling. 2015-09-02 17:01:23 -07:00
Chris R d3ad11a753 #47 Rename Notifications to Events and Contexts. 2015-09-02 17:01:21 -07:00
Chris R 0f115f1fda #307 Assume notifications are not null. 2015-09-02 17:01:18 -07:00
Chris R 4b1f710c39 #415 Use a cross-platform friendly HttpClient for CoreCLR. 2015-09-02 16:25:27 -07:00