Shannon 8d2e708d1c Adds exception handling for the BackOfficeUserStore - this will occur if the external OAuth provider doesn't return the Email or Name correctly, then an exception is swallowed at the service level and the user is not actually created, but the BackOfficeUserStore could not detect this, so it's detecting this now.

2016-01-05 11:36:52 +01:00

..

AuthenticationExtensions.cs

Fixes: U4-7536 Sign-out in back office will call all ASP.Net identity middleware sign out methods

2015-12-15 10:34:11 +01:00

BackOfficeClaimsIdentityFactory.cs

Updates the UmbracoBackOfficeIdentity to have better support for claims and adds unit tests for it. Creates OwinLogger's and methods to apply them. Updates security methods to ensure that a UmbracoBackOfficeIdentity is returned even from a normal ClaimsIdentity which will be the case with bearer tokens. Updates the angular anti-forgery checker to be ignore if the auth type is not cookie based. Adds a simple token server provider that people can use if they want. Now token authentication is working.

2015-04-10 14:22:09 +10:00

BackOfficeCookieAuthenticationProvider.cs

Ensures that OWIN signout method is called - this ensures that any auth middleware configured for the current user is called for sign out. Updates our cookie middleware provider to also ensure that our custom cookies are cleared when signing out with OWIN.

2015-11-19 11:57:24 +01:00

BackOfficeSignInManager.cs

Cleans up the usages of auth cookies. OWIN is in charge of auth cookies but because we have Webforms, WebApi, MVC and OWIN, they all like to deal with cookies differently. OWIN should still be solely in charge of the auth cookies, so the auth extensions are cleaned up, the renewal now works by queuing the renewal and we have custom middleware detect if a force renewal has been queued and we renew the auth cookie there. Have obsoleted a few methods that should not be used that write auth tickets directly (this is purely for backwards compat with webforms). All of these changes now ensure that the auth cookie is renewed consistently between Webforms, WebApi, MVC and OWIN. Some changes also include ensuring that OWIN is used to sign out.

2015-11-19 18:12:21 +01:00

BackOfficeUserManager.cs

Adds native ability to be able to fallback to default password checking if specifying a custom IBackOfficeUserPasswordChecker

2015-10-26 14:51:19 +01:00

BackOfficeUserPasswordCheckerResult.cs

Adds native ability to be able to fallback to default password checking if specifying a custom IBackOfficeUserPasswordChecker

2015-10-26 14:51:19 +01:00

BackOfficeUserStore.cs

Adds exception handling for the BackOfficeUserStore - this will occur if the external OAuth provider doesn't return the Email or Name correctly, then an exception is swallowed at the service level and the user is not actually created, but the BackOfficeUserStore could not detect this, so it's detecting this now.

2016-01-05 11:36:52 +01:00

IBackOfficeUserPasswordChecker.cs

Adds native ability to be able to fallback to default password checking if specifying a custom IBackOfficeUserPasswordChecker

2015-10-26 14:51:19 +01:00

IUmbracoMemberTypeMembershipProvider.cs

Starts stubbing out role manager code

2015-04-01 13:41:43 +11:00

IUsersMembershipProvider.cs

completes: U4-3996 Fix EditUser to use the membership provider properly, U4-3997 Fix EditMember to use the membership provider properly

2014-01-22 11:57:33 +11:00

MembershipPasswordHasher.cs

Starts stubbing out role manager code

2015-04-01 13:41:43 +11:00

MembershipProviderBase.cs

Fixes user lockout with aspnet identity

2015-07-01 18:02:58 +02:00

MembershipProviderExtensions.cs

Implements IExternalLoginService and the db table, implements more logic to start enabling this to work in the back office, need to implement the rest of the userstore and then implement a way once logged in to the back office to allow users to link their accounts with external logins. Currently if an external login is detected during startup and it has not been linked we'll throw an exception. Very very close to making this all work nicely.

2015-04-01 13:41:26 +11:00

UmbracoBackOfficeIdentity.cs

puts the claim validation back in (needs to be there, took it out for testing)

2015-04-15 20:38:04 +10:00

UmbracoMembershipProviderBase.cs

Implements IExternalLoginService and the db table, implements more logic to start enabling this to work in the back office, need to implement the rest of the userstore and then implement a way once logged in to the back office to allow users to link their accounts with external logins. Currently if an external login is detected during startup and it has not been linked we'll throw an exception. Very very close to making this all work nicely.

2015-04-01 13:41:26 +11:00

UserData.cs

Fixes: U4-4819 Publicize AuthenticationExtensions

2014-05-06 18:15:38 +10:00