Commit Graph

235 Commits

Author SHA1 Message Date
Hao Kung fec3002fff Renames 2015-09-21 16:32:14 -07:00
Hao Kung 59ccbdd8ca Fix stuff 2015-09-21 14:56:05 -07:00
Hao Kung 081577e4f4 Remove usage IOptions from middleware ctors 2015-09-18 12:24:33 -07:00
Hao Kung 5cc1fea400 Add CookiePolicy Middleware 2015-09-17 15:37:15 -07:00
Chris R 1c0768fb71 #372 Flow mutable event state.
#358 Add a UserInformationReceived event.
#327 Add AuthenticationCompleted event.
#340 Split the Redirect event for Authentication and SignOut.
Rename OnAuthorizationCodeRedeemed to OnTokenResponseReceived.
Move IdTokenReceived to AuthorizationResponseReceived.
Rename IdTokenValidated to AuthenticationValidated.
2015-09-16 14:31:36 -07:00
Chris R ee2d263223 #434 Remove the nonce cache. 2015-09-15 09:13:26 -07:00
Hao Kung e8090a3176 Remove authentication from names, async events 2015-09-14 14:54:51 -07:00
Pranav K 0f06b6a09a Adding NeutralResourcesLanguageAttribute 2015-09-10 18:31:59 -07:00
Chris R 2982d743d8 #443 Remove custom certificate validators. 2015-09-10 08:41:08 -07:00
Chris R ebcad24307 #404 Verify state via independent cookie. 2015-09-09 12:16:22 -07:00
Chris R 9f7a723843 #390 Make the nonce cookie expire. 2015-09-09 11:55:14 -07:00
Hao Kung 5bc13cbd6b UseOauth now requires an instance of options 2015-09-09 11:05:14 -07:00
Chris R 76fd055d8e Remove redundant body rewind. 2015-09-08 14:14:39 -07:00
Ryan Nowak 831785fe9f Make AddAuthorization() idempotent
Found this issue which looking into making AddMvc() idempotent. You'll end
up with multiple pass-through handlers registered if two components call
AddAuthorization(). This is very possible to happen if used two frameworks
in the same app.
2015-09-04 08:26:54 -07:00
Chris R d2701f4897 #58 Serialize the ClaimsIdentity.BootstrapContext. 2015-09-03 17:25:56 -07:00
Chris R dda67b9d7c Remove unused RedirectFromIdentityProviderContext. 2015-09-03 12:39:36 -07:00
Chris R 47520e126e #47 Standardize on I*Events pattern. 2015-09-03 11:02:19 -07:00
Chris R 2aba485263 Move Context objects to OIDC and JwtBearer, remove generics. 2015-09-02 17:01:25 -07:00
Chris R e4f78176f9 Regenerate Resources.Designer.cs using the standard tooling. 2015-09-02 17:01:23 -07:00
Chris R d3ad11a753 #47 Rename Notifications to Events and Contexts. 2015-09-02 17:01:21 -07:00
Chris R 0f115f1fda #307 Assume notifications are not null. 2015-09-02 17:01:18 -07:00
Chris R 4b1f710c39 #415 Use a cross-platform friendly HttpClient for CoreCLR. 2015-09-02 16:25:27 -07:00
Hao Kung bf2b771eab React to Options, Configure => Add, Cookie changes
UseCookie now has an overload which takes an instance of CookieOptions
2015-09-02 14:13:16 -07:00
Chris R bcf8a45340 #413 Rename OAuthBearer to JwtBearer. 2015-09-01 12:23:51 -07:00
Chris R 561c997cb2 React to IHeaderDictionary API changes. 2015-08-31 20:29:36 -07:00
Kévin Chalet d9b3ea2a54 Add POST support for OpenID Connect authorization and logout requests 2015-09-01 03:59:50 +02:00
Kévin Chalet fa39144937 Use automatic properties, replace scope by a list and replace the validators list by a single validator 2015-09-01 01:23:41 +02:00
Chris R 56315c441c Use new HttpContext.Features API. 2015-08-31 06:46:18 -07:00
Chris R 92185a1c27 React to string[] -> StringValues changes. 2015-08-28 14:16:49 -07:00
Chris R d5e27bf546 #278 Validate the message, not the JWT. 2015-08-25 13:47:11 -07:00
Chris R 7213b53554 #407 OIDC - Fail if the user-info subject does not match 2015-08-25 11:26:02 -07:00
Chris R 86962ab12c #278 Additional OIDC message validation. 2015-08-22 21:17:38 -07:00
Hao Kung a3f0ee3330 Add a shared dataprotection test for cookies 2015-08-12 14:10:42 -07:00
Hao Kung 3294de14f4 Add DefaultPolicy support for AuthZ 2015-08-11 17:04:36 -07:00
Hao Kung b883920bef Cookies now always redirects to Login/AccessDenied Paths 2015-08-11 16:50:20 -07:00
Pranav K b1013ed976 Reacting to DI changes 2015-08-11 14:07:12 -07:00
Chris R f3e03fbf26 #396 React to CoreCLR Cryptography package changes, remove transitive dependencies. 2015-08-11 10:43:02 -07:00
Troy Dai 2a204e473b Update CoreCLR versions 2015-08-04 10:15:32 -07:00
unknown b85db5e8c0 Reacting to namespace changes in identitypackages - beta7 update 2015-07-30 13:11:08 -07:00
bchavez bdab4d95fd Using QueryHelpers helps avoid issue #365. 2015-07-28 10:13:52 -07:00
Hao Kung 5bb5662e74 Remove sync AuthZ APIs 2015-07-20 16:36:25 -07:00
Hao Kung 5a2499eb22 Rename ExternalAuthenticationOptions => Shared 2015-07-16 12:43:03 -07:00
Hao Kung 73d4440a25 API review: nuke notification namespaces 2015-07-16 11:56:48 -07:00
Kévin Chalet 54128e8137 Add response_mode=query support for OpenID Connect 2015-07-15 18:36:21 +02:00
Hao Kung ab4ba794e5 Fix cookie bugs, Authenticate => HandleAuthenticate 2015-07-14 13:22:04 -07:00
Hao Kung 5065835a05 Remove special cookie ajax redirect behavior 2015-07-14 13:19:25 -07:00
tushar gupta 8d7f052cf4 Adding support for signing in using "code flow" 2015-07-14 11:51:16 -07:00
unknown c6aa9371c7 Updating protocol.extensions package version from beta5 to beta6 2015-07-08 17:26:03 -07:00
Hao Kung efc35302e8 Switch to shared security helper 2015-07-08 15:01:09 -07:00
Chris R 57031946d0 #214 Refactor OIDC state parameters. 2015-07-08 12:21:14 -07:00