Commit Graph

235 Commits

Author SHA1 Message Date
Praburaj 101b719994 Changing Wilson packages to beta4 2015-03-30 19:10:57 -07:00
Praburaj 4a5b9f6b6e Add a description for the OpenIdConnect package 2015-03-23 21:34:26 -07:00
Hao Kung 776593ec71 React to hosting changes 2015-03-19 11:04:33 -07:00
Hao Kung e2a8efbb64 Cleanup
Switch to logging interfaces reference
Tweak DenyAnonymous logic

Fixes https://github.com/aspnet/Security/issues/181
Fixes https://github.com/aspnet/Security/issues/169
2015-03-17 11:40:58 -07:00
Hao Kung 7abccd8f22 React to Shared NotNull 2015-03-16 15:22:46 -07:00
Hao Kung 14d1b467c6 ClaimsXform and RIP AutoAuthHandler
- Initial support for ClaimsTransformation
- merge automatic auth handler back into base
2015-03-16 15:14:44 -07:00
Praburaj bd7f07052e Using [NotNull] from the common package 2015-03-14 07:25:14 -07:00
N. Taylor Mullen f8c526c12d Update .kproj => .xproj. 2015-03-11 14:04:40 -07:00
Hao Kung 78406b411c Remove config from AddAuthorization 2015-03-11 11:43:48 -07:00
Praburaj b7c8af8503 Reading AuthenticationProperties from SignOutContext
This will enable users to set a specific redirect uri and call signout.
2015-03-09 19:48:04 -07:00
N. Taylor Mullen 08fdd7ad30 Remove BOM from project.json, *.cmd, *.sh and *.shade files. 2015-03-09 12:59:01 -07:00
N. Taylor Mullen 1bd605da5e Update aspnet50/aspnetcore50 => dnx451/dnxcore50. 2015-03-08 12:56:09 -07:00
Hao Kung 5e7f1d7eff Add Configure overloads for Auth for config/name 2015-03-06 12:37:34 -08:00
Praburaj ce8caf0b9a Rename Microsoft.AspNet.Http.Interfaces => Microsoft.AspNet.Http 2015-03-05 17:13:43 -08:00
Hao Kung aacc00aaee Move extension methods to proper namespaces
Also add sugar for OpenIdConnect

Fixes https://github.com/aspnet/Security/issues/107
Fixes https://github.com/aspnet/Security/issues/113
2015-03-05 16:04:57 -08:00
Hao Kung e2bb76280f Support AccessDeniedPath for Cookie 403 redirection
Fixes https://github.com/aspnet/Security/issues/166
2015-03-05 15:01:44 -08:00
Hao Kung 1459ca1edb React to DI changes 2015-03-04 19:57:15 -08:00
Brennan 329d826857 Logging API changes 2015-03-04 17:10:56 -08:00
Hao Kung 0577454f13 Fix for OpenIdConnect 2015-03-03 15:40:54 -08:00
Hao Kung d890f49fc0 Fix sln and kproj 2015-03-02 17:43:59 -08:00
Hao Kung 775eb5ece4 Split Security into AuthN/AuthZ
AuthenticationType -> Scheme
Move Active/Passive into AutomaticAuthenticationHandler
Security -> Authorization/Authentication assemblies
401-403 logic
Switch from ClaimsIdentity to ClaimsPrincipal
2015-03-02 15:33:52 -08:00
Levi B d864b72561 React to DataProtection rename 2015-02-25 17:23:11 -08:00
Levi B a15cb4ffe5 React to HttpRequest.IsSecure renaming 2015-02-17 11:08:12 -08:00
Hao Kung 5094b85ac9 Latest AuthZ iteration
- Core Auth API now takes list of IAuthorizationRequirements, or policy
name.
- Overload that takes AuthorizationPolicy instance moved to extension
method.
- Remove HttpContext from API and replace with ClaimsPrincipal instead
- Add Operation requirement
- Add Sync overloads
- Add ClaimsTransformationOptions (TBD where to use this)

Fixes https://github.com/aspnet/Security/issues/132
Fixes https://github.com/aspnet/Security/issues/116
Fixes https://github.com/aspnet/Security/issues/11
Fixes https://github.com/aspnet/Security/issues/117
2015-02-16 15:04:10 -08:00
Praburaj 04c6b1f101 Adding necessary dependencies to OpenIdConnect directly
OpenIdconnect project is betting on the dependencies included by Microsoft.IdentityModel.Protocol.Extensions for the types that are referenced directly in this library but not used in Protocol.Extensions library.

This change is to enable Wilson clean up its unused dependencies.
2015-02-10 11:25:30 -08:00
David Fowler bb2352c638 Remove build time deps and fixed formatting 2015-02-10 11:01:03 -08:00
Pranav K 74bb8e089d Reacting to System.Dynamic.Runtime version changes 2015-02-06 09:55:22 -08:00
Brennan b17d718d27 Updating .kproj files 2015-02-04 14:24:28 -08:00
Praburaj 4e83a678c0 Creating authentication ticket by passing in a principal
This fixes bug : https://github.com/aspnet/Security/issues/144
2015-02-02 13:46:28 -08:00
BrentSchmaltz 3483842ab7 Rollback of setting Principal on AuthenticationTicket.
adjust formating of messages.
2015-01-28 10:27:55 -08:00
BrentSchmaltz e04358f7f9 Missing resource file. 2015-01-27 09:58:47 -08:00
BrentSchmaltz e5518e6fc2 ChallengeContext will be null with [Authorize] attribute
OpenIdConnect set Ticket.Principal, get identity from there.
2015-01-27 08:15:28 -08:00
Stephen Halter ac03ad3edf Handle HttpFeature rename 2015-01-18 20:55:49 -08:00
Hao Kung 123065c0ae Add some sugar for AuthZ
- Register passthrough handler by default
- AddPolicy overload that takesAction<AuthorizationPolicyBuilder>
- Chaining policy overloads/methods
- More fluent apis for PolicyBuilder
Fixes #122, #114
2015-01-17 17:11:34 -08:00
tushar gupta c53394e847 Cleaning up comments and some TODOs. 2015-01-16 14:45:53 -08:00
tushar gupta cdbd003bb1 Adding token property to MessageReceivedNotification 2015-01-16 14:45:50 -08:00
tushar gupta de56109c16 Fixing Issue #120 2015-01-16 14:45:47 -08:00
Hao Kung 4a635835af Initial iteration of new Authorization Service 2015-01-15 23:37:35 -08:00
Chris Ross f7c502a9e6 Handle PipelineCore rename. 2015-01-15 13:57:07 -08:00
Pranav K 123e649ee2 * Removing transitive dependencies from project.json
* Fix casing for project.json
2015-01-15 07:54:10 -08:00
Chris Ross 61bdaec1e2 Handle QueryBuilder namespace change. 2015-01-14 17:04:10 -08:00
Chris Ross 38fb911afc Clean up auth types, copywrite headers, file names, exceptions. 2015-01-14 15:13:24 -08:00
Chris Ross 91242245f3 Fix directory casing, part 2. 2015-01-14 14:54:47 -08:00
Chris Ross 8e6e7f9590 Fix directory casing, part1. 2015-01-14 14:53:51 -08:00
BrentSchmaltz 49e66f0311 Additions for OpenIdConnectMiddleware and OAuthBearer Beta1. 2015-01-14 14:50:45 -08:00
Chris Ross fbe80ee64e Handle ReadFormAsync breaking changes. 2015-01-07 18:10:42 -08:00
Chris Ross e6218c0429 React to ReadFor breaking change. 2015-01-07 17:06:22 -08:00
Chris Ross fec32f6746 #82 - Improve error handling mechanics. 2015-01-07 10:05:26 -08:00
Chris Ross 8b7d33baaf #63 - Use the PathBase in the Cookie path by default. 2014-12-18 14:41:16 -08:00
Pranav K fcf2f93aa3 Updating System.ObjectModel version that was copied incorrectly 2014-12-15 16:50:13 -08:00
Pranav K 20f21aa57f Removing transitive dependencies from Microsoft.AspNet.Security.OAuth 2014-12-15 15:04:48 -08:00
Chris Ross 184233af61 #79: Remove cookie compression. 2014-12-05 10:40:46 -08:00
Victor Hurdugaci 0a71973513 Add schema version to kproj files 2014-11-25 11:03:55 -08:00
Chris Ross 0fee3c87a0 #85 - Update the targeted Facebook API version to v2.2. 2014-11-14 15:05:31 -08:00
Victor Hurdugaci ee162013a5 Update KProj to the latest format 2014-11-12 15:33:16 -08:00
David Fowler 6aed946a63 Merge branch 'release' into dev 2014-10-31 02:12:01 -07:00
David Fowler a5bd9d29e5 Added package descriptions 2014-10-31 02:11:42 -07:00
Pranav K 2934bb866d Removing transitive dependencies from project.json 2014-10-29 11:23:57 -07:00
Pranav K fb51830598 Merge branch 'release' into dev 2014-10-29 11:04:28 -07:00
Pranav K edefdf6b2f Updating Newtonsoft.json version to 6.0.6 2014-10-29 10:32:37 -07:00
Chris Ross a492b8fcbd #84 - Fix regression with OAuth Notifications. 2014-10-27 16:01:31 -07:00
Chris Ross 95f19407fc #74 - Clean up data protection provider helper. 2014-10-21 14:01:25 -07:00
Chris Ross 89ade800c4 Update Claims dependency. 2014-10-17 09:49:04 -07:00
Hao Kung 78f472fd20 Switch to automatically ensure request services 2014-10-16 11:14:07 -07:00
Chris Ross 45836c8041 Update UseMiddleware dependencies. 2014-10-15 15:56:08 -07:00
Hao Kung 84dfcf5258 React to Options and Hosting changes 2014-10-14 19:14:54 -07:00
Chris Ross 6965a66f18 #59 - Use Task.GetAwaiter().GetResult() instead of Task.Result. 2014-10-13 14:26:24 -07:00
Chris Ross 3e88f44552 #69 - Properly delete Twitter state cookie. 2014-10-13 11:13:24 -07:00
Levi B 2e65a40555 Update Security to account for DataProtector API changes. 2014-10-10 12:21:08 -07:00
Pranav K 9e2f992479 Removing version from framework assemblies node 2014-10-10 10:57:33 -07:00
Pranav K d598b83e33 Reacting to CLR package versioning changes 2014-10-10 10:34:22 -07:00
Chris Ross 4853554147 #39 - Port the OAuth Bearer middleware from Katana. 2014-10-09 09:04:24 -07:00
Hao Kung 3426034bcb Use DI activated options for auth middlewares
UseXXX() now use DI activated options
Use ExternalAuthenticationOptions instead of DefaultSignInAs
2014-10-08 13:02:08 -07:00
David Fowler 23c024ef41 Fixup references 2014-10-05 12:26:17 -07:00
Chris Ross 0f9ac1f84f #52 - Set a default user-agent for the OAuth backchannel. 2014-10-02 12:05:35 -07:00
Pranav K 43cdd54c16 Removing declaration expressions 2014-10-01 14:47:27 -07:00
Chris Ross 35ad3ec7bb Code cleanup. 2014-09-15 09:35:55 -07:00
Chris Ross 07b3fe2135 #32 - Port comment and flow cleanup from Katana. 2014-09-12 14:42:55 -07:00
Chris Ross f258724cbd #32 - Honor AuthenticationProperties.AllowRefresh. 2014-09-12 12:41:23 -07:00
Chris Ross a9e40ac895 Properly delete the correlation cookie. See Katana #230. 2014-09-12 12:41:19 -07:00
Chris Ross b10cda80a7 #32 - Port Cookies OnException notification from Katana. 2014-09-12 12:41:15 -07:00
Chris Ross 83bffe3542 #32 - Port Cookies OnSignedIn notification from Katana. 2014-09-12 12:41:11 -07:00
Chris Ross d6b82b8799 #32 - Port cookie auth session store from Katana. Add MemoryCache sample. 2014-09-12 12:41:07 -07:00
Chris Ross f6d6f31414 #32 - Port Cookie chunking from Katana. 2014-09-12 12:41:02 -07:00
Chris Ross 51c3dc98dc Handle IBuilder rename to IApplicationBuilder. 2014-09-10 12:27:01 -07:00
Wei Wang 43fdf2a460 Upgrade Newtonsoft.Json to 6.0.4 version 2014-09-09 20:42:41 -07:00
Chris Ross 77f9fc496d Update dependecy versions. 2014-09-08 13:50:14 -07:00
Chris Ross 80c8891c08 #49 - OAuth base middleware. 2014-09-08 11:42:11 -07:00
David Fowler 810c96e939 Updated to use the new target framework in project.json 2014-09-04 01:47:16 -07:00
David Fowler 565fde5187 Fixed packages 2014-09-02 21:29:07 -07:00
Chris Ross 06bdcebf63 Fixed project.json casing 2014-08-29 13:29:29 -07:00
Chris Ross 6b0c51a531 Renamed Project.json to Project.json2 2014-08-29 13:26:14 -07:00
Chris Ross 3a3816af41 #41 - Port MicrosoftAccount middleware from Katana. 2014-08-29 13:19:18 -07:00
David Fowler 536da06660 Updated to use the new target framework in project.json 2014-08-28 23:48:55 -07:00
Chris Ross b9eb7ba282 #38 - Port the Twitter middleware from katana 2014-08-27 09:02:44 -07:00
Chris Ross 5577159453 #37 - Port the Google auth middleware from Katana. 2014-08-25 09:50:19 -07:00
Chris Ross 0cc85f687e Reacting to System.IO package version change 2014-08-20 15:18:29 -07:00
Chris Ross 919fa0c195 Port Facebook middleware from Katana. 2014-08-20 14:52:01 -07:00
Pranav K fabdb3b9df Reacting to System.IO package version change 2014-08-20 06:56:36 -07:00
David Fowler c74e583ec9 Removed source files from the project 2014-08-15 09:27:27 -07:00
Chris Ross 05804c78db Port more security tests from Katana. 2014-08-07 16:08:44 -07:00
Chris Ross c733aa8804 #28 - Use a GZipStream constructor that's supported on Mono. 2014-07-25 15:43:38 -07:00
Pranav K 8b0500dacf Replace RNGCryptoServiceProvider with RandomNumberGenerator 2014-07-17 09:20:51 -07:00
Chris Ross 8b46d43dcb Make middleware report when auth fails (async). 2014-07-16 14:45:53 -07:00
Pranav K 8307e9b1f3 Reacting to System.Collections versioning change 2014-07-14 16:48:04 -07:00
David Fowler ea98a50e43 Renamed configurations to frameworks in project.json 2014-07-13 22:01:33 -07:00
Chris Ross 287eebe244 Handle change from IList to IEnumerable. 2014-07-03 10:12:15 -07:00
Chris Ross 81c06fa558 Make middleware report when auth fails. 2014-06-30 14:12:55 -07:00
Brice Lambson faf98f8bb0 Bump version to 1.0.0-* 2014-06-19 16:47:16 -07:00
David Fowler ba6488fb6a Fixed project.json casing 2014-05-26 02:52:29 -07:00
Pranav K 75759dae9c Updating kproj file to match tooling changes 2014-05-18 20:13:57 -07:00
Sebastien Ros d9502923f8 Moving interface members to extension methods 2014-05-12 14:32:07 -07:00
Chris Ross e2d3598438 Create cookie auth middleware with DI. 2014-05-09 09:44:18 -07:00
Andrew Peters d02f76a2fd Updating copyright headers 2014-05-08 23:01:33 -07:00
Wei Wang f8f3e34986 Sort dependencies and remove duplicates in dependencies 2014-05-07 18:04:18 -07:00
Wei Wang 08929a6e99 Fix dependency issues 2014-05-06 12:16:15 -07:00
David Fowler d916a6d66a React to renames 2014-05-06 01:04:17 -07:00
Chris Ross 1235ea1a6f Fix HttpAbstractions dependency renames. 2014-05-06 00:59:16 -07:00
Wei Wang 34b4c7e3a7 Remove unused dependency 2014-05-05 20:15:50 -07:00
Sebastien Ros 14205d1708 Applying IHttpAuthenticationFeature renaming 2014-05-05 17:01:57 -07:00
Sebastien Ros 05b091ee66 Removing Authorization namespace 2014-05-05 15:37:36 -07:00
Sebastien Ros b7ed0faa33 Adding AuthorizationPolicy and mutable user claims
#13
2014-05-05 14:29:13 -07:00
Chris Ross 3a5ad14fe0 Remove unused filesystem dependencies. 2014-05-01 12:46:10 -07:00
Sebastien Ros 4568e74954 Adding null check in ctor 2014-04-28 12:38:38 -07:00
Sebastien Ros f5200a1d55 Implementing IAuthorizationService
#7
2014-04-24 16:16:15 -07:00
David Fowler 9726a26056 Update based on new API changes 2014-04-17 22:25:17 -07:00
David Fowler 689bdf2072 Removed properties folder 2014-04-17 22:20:40 -07:00
Chris Ross a748266eb6 Update to use new tooling. 2014-04-16 15:57:28 -07:00
Chris Ross 7edb32f526 Cookies: Do redirects for 401s if Active, regardless of challenges. 2014-04-10 16:32:44 -07:00
Chris Ross 551fca35d3 Review cleanup, rename Provider to Notifications, use NotNull. 2014-04-08 11:28:08 -07:00
Chris Ross d83d2e98d6 Review cleanup, fallback logger, CreateDataProtecter extension. 2014-04-03 10:43:11 -07:00
Chris Ross 2b226c936f Update for latest abstraction contracts. 2014-04-01 17:18:37 -07:00
Chris Ross 83855f8eac Redesign security contracts. 2014-03-31 10:30:57 -07:00
Pranav K 50f4fff510 Updating CoreCLR package versions 2014-03-28 09:28:23 -07:00
Chris Ross 085188996c Initial port of Secuirty base package from Katana. 2014-03-14 12:43:45 -07:00