Commit Graph

105 Commits

Author SHA1 Message Date
Ryan Brandenburg a10c3cb23b Upgrade to netcoreapp22 2018-05-08 11:11:18 -07:00
Patrick Westerhoff 06c93669d6 Allow overwriting parameters on challenge requests
Add a way to overwrite query arguments that are passed as part of the
challenge request to the external authentication provider in OAuth-based
authentication providers, including OpenID Connect.

This uses the new `AuthenticationProperties.Parameters` collection to
pass parameters to the authentication handler which will then look for
special items within that property bag, overwriting previously
configured values within the authentication options.

This can be used for example to overwrite the OAuth scopes that are
requested from an authentication provider, or to explicitly trigger a
reauthentication by requiring a login prompt with OpenID Connect. By
being able to specify this on individual challenge requests (using
`HttpContext.ChallengeAsync`), this is independent from the global
scheme configuration.

Custom ~ChallengeProperties types, e.g. `OAuthChallengeProperties` for
OAuth-based authentication providers, provide assistance in setting the
challenge request parameters but are not required to make the handlers
use the overwritten values.

- Adjust authentication handlers to respect the custom parameters, and
  add ~ChallengeProperties types.
- Introduce `OAuthHandler.FormatScope(IEnumerable<string>)` to format a
  custom set of scopes. Subclasses requiring a different scope format
  should override this method instead of the parameterless overload.
  Overriding just `FormatScope()` will prevent handlers from supporting
  overwriting the OAuth `scope` in a challenge request.
- Refactor GoogleHandler to support parameterization through both the
  `Parameters` and the `Items` collection (former is preferred) to keep
  compatibility with the old behavior.
- Add an OpenIdConnect sample to overwrite the prompt argument in a
  challenge request.
- Add extensive tests.
2018-03-23 02:09:05 +01:00
Chris Ross (ASP.NET) 90064ce9df Add ClaimActions for bulk add and remove. #1609 2018-03-21 16:35:37 -07:00
Pranav K f8711a2da3 Update samples and tests to target netcoreapp2.1 2017-11-13 17:24:59 -08:00
Nate McMaster bd8ecd0268 Pin tool and package versions to make builds more repeatable
Part of aspnet/Universe#575
2017-11-01 16:37:42 -07:00
Nate McMaster a53bf093a7 Use PackageLineup to manage PackageReference versions 2017-08-29 15:26:04 -07:00
Nate McMaster 724be48ee9 Use Directory.Build.props/targets 2017-08-29 15:24:01 -07:00
Chris R 5d802a7988 Add sample for refresh tokens 2017-08-03 15:01:11 -07:00
Kiran Challa 04a40b5454 Removed DotNetCliToolReference from the samples to fix build break 2017-07-14 06:30:30 -07:00
Chris R 5485846b5c Update IdentityModel versions to latest, fix samples. 2017-07-12 09:56:25 -07:00
Ryan Brandenburg d433f034fa Remove NETStandard.Library.NETFramework 2017-07-07 10:30:07 -07:00
Hao Kung ff9f145a8e Refactor Events + Add IAuthenticationBuilder 2017-06-29 16:27:03 -07:00
Chris R 30392a1811 Retarget to netstandard2.0 and net461 2017-05-24 19:04:48 -07:00
Chris R 2a4a7dd26a Make samples work. Fix AddOAuthAuthentication extension. (#1226) 2017-05-22 10:01:44 -07:00
BrennanConroy b7a5a6044d Fix samples logging (#1205) 2017-05-09 08:57:39 -07:00
Pranav K 85dcdcc92c Merge pull request #1203 from aspnet/rel/2.0.0-preview1
Migrate to netcoreapp2.0 (#1202)
2017-05-04 19:27:14 -07:00
Chris R d84abf1fe6 Migrate to netcoreapp2.0 (#1202)
* Migrate to netcoreapp2.0, remove Microsoft.Owin.Security.Interop & tests.

* Remove net45 baselines
2017-05-04 19:26:44 -07:00
Nate McMaster e17b275d92 Revert "Temporarily disable DotNetCliToolReference in samples until aspnet/Universe#506 is resolved"
This reverts commit 4b9f57b3b3.
2017-04-28 11:51:56 -07:00
Nate McMaster 4b9f57b3b3 Temporarily disable DotNetCliToolReference in samples until aspnet/Universe#506 is resolved 2017-04-25 11:29:03 -07:00
Hao Kung 99aa3bd35d Auth 2.0 2017-04-19 13:00:03 -07:00
Pranav K ffa45dbd01 Change compilation targets.
* Remove net451 as a compilation target
* Upgrade to netcoreapp2.0
2017-03-22 06:04:21 -07:00
Nate McMaster 10ef26d63c Consolidate dependency versions into one file and remove workarounds 2017-03-15 18:12:53 -07:00
Nate McMaster 7f0b14a8ef
React to aspnet/DotNetTools#272 2017-03-14 12:51:09 -07:00
Nate McMaster 9847f40654
Downgrade to stable packages 2017-02-14 16:15:42 -08:00
Nate McMaster 61e7ceba45 React to aspnet/Configuration#594 2017-02-08 17:44:52 -08:00
Nate McMaster 7634c5420a Upgrade to RC.3
Removes __TemporarySources__ to use contentFiles packages
Remove default globs
Update test platform
2017-01-19 22:31:43 -08:00
Stephen Halter fa64b0c0fb React to UseHttps change 2017-01-09 19:58:22 -08:00
Chris R 9917e8bb30 Update launchSettings for new VS 2017 rules 2017-01-09 15:12:32 -08:00
Nate McMaster 861026cd76 Remove redundant references 2017-01-05 18:16:07 -08:00
Nate McMaster ba8f85d972 Upgrade to VS 2017 2017-01-05 13:53:05 -08:00
Pranav K 7ab28ecdc6 Updating to 4.4 CoreFx packages 2016-12-14 14:47:31 -08:00
Pranav K 46df38de68 Updating versions to 1.2.0-* 2016-11-09 14:19:34 -08:00
Chris R 2d1c56ce5c #884 Honor OIDC's and Jwt's OnAuthenticationFailed HandleResponse() 2016-10-31 13:48:50 -07:00
Pranav K 7e577832ff Updating to netcoreapp1.1 2016-10-13 11:24:28 -07:00
Pranav K 1268d245b8 Revert "Updating to netcoreapp1.1"
This reverts commit 55134b31fe.
2016-10-12 16:09:40 -07:00
Pranav K 55134b31fe Updating to netcoreapp1.1 2016-10-12 13:46:35 -07:00
Pranav K f64c864911 Updating partner package versions 2016-10-03 14:28:05 -07:00
Troy Dai 59a86c17e2 Update OpenIdConnectSample
1. Use bootstrap to enhance the view.
2. Html encoding
3. Improve readability
2016-08-24 14:28:31 -07:00
Petr Onderka a1f8278381 Improve sample README
* fixed broken link
* improved formatting
* added missing full stops
2016-07-20 19:35:12 +02:00
Troy Dai 6cee57752f Update OpenIdConnectSample
1. Add instruction for OpenIdConnectSample
2. Clear unused using statements
3. Hardcoded server URL in `Program.cs`
2016-07-14 15:25:30 -07:00
Doug Bunting 792b316950 One build to rule them all
- well, at least VS and command-line builds will share output
- part of aspnet/Coherence-Signed#277
2016-07-07 12:40:05 -07:00
Pranav K d8d408638e Updating to dev versions
# Conflicts:
#	src/Microsoft.AspNetCore.Authentication.OAuth/project.json
#	src/Microsoft.AspNetCore.Authentication.Twitter/project.json
2016-06-16 11:31:40 -07:00
N. Taylor Mullen b7bdb39b92 Remove direct Microsoft.NETCore.Platforms dependency.
- Microsoft.NETCore.App now pulls this package in.

aspnet/Coherence-Signed#344
2016-06-13 15:29:53 -07:00
jacalvar e1495f5f32 Remove unncessary usings 2016-06-09 00:48:37 -07:00
Pranav K bffbfc7f9e React to OpenId renames 2016-06-04 18:53:09 -07:00
Kévin Chalet 56dca7e0bc Add a 'sid' check to the OIDC middleware to prevent unsolicited logout when possible 2016-06-02 12:21:17 -07:00
Chris R d6763bd77c #423 Support distributed sign-out. 2016-05-27 14:51:53 -07:00
Chris R 59fc691f41 #667 #801 Handle authorize and forbid for redirecting handlers. 2016-05-23 10:50:50 -07:00
Chris R 8b4b99b168 Clean up samples 2016-05-17 13:36:18 -07:00
Chris R 7645253420 #808 Update OIDC to v1.0 2016-05-03 09:39:36 -07:00