ChangeLog 27 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828
  1. 2007-12-08 Marek Habersack <[email protected]>
  2. * SqliteRoleProvider.cs: added - a Role Provider for
  3. Sqlite, based on PostgreSQL Role Provider code from Daniel
  4. Nauck <[email protected]>
  5. * SqliteMembershipProvider.cs: added - a Membership Provider for
  6. Sqlite, based on PostgreSQL Membership Provider code from Daniel
  7. Nauck <[email protected]>
  8. 2007-11-28 Marek Habersack <[email protected]>
  9. * SqlMembershipProvider.cs: handle situation when there is no
  10. connection string configured for the SQL Membership Provider.
  11. 2007-11-01 Marek Habersack <[email protected]>
  12. * RolePrincipal.cs, MembershipProvider.cs: use the new
  13. MachineKeySectionUtils class wherever necessary.
  14. * FormsAuthentication.cs: use the new MachineKeySectionUtils class
  15. wherever necessary.
  16. GetHexString is a private method again.
  17. 2007-10-31 Marek Habersack <[email protected]>
  18. * FormsAuthentication.cs: made GetHexString an internal method -
  19. it is used in the AssemblyResourceLoader.cs
  20. 2007-08-14 Marek Habersack <[email protected]>
  21. * Roles.cs: remove unused field.
  22. * SqlMembershipProvider.cs: remove unused variable.
  23. 2007-08-13 Vladimir Krasnov <[email protected]>
  24. * SqlRoleProvider.cs: fixed ApplicationName initialization
  25. 2007-06-24 Vladimir Krasnov <[email protected]>
  26. * FormsAuthentication.cs: improved performance of GetHexString()
  27. 2007-05-17 Vladimir Krasnov <[email protected]>
  28. * SqlMembershipProvider.cs: fixed DeleteUser, fixed parameter name
  29. 2007-05-14 Igor Zelmanovich <[email protected]>
  30. * SqlMembershipProvider.cs: Fix parameter binding to stored procedures.
  31. 2007-05-09 Igor Zelmanovich <[email protected]>
  32. * PassportIdentity.cs:
  33. added MonoNotSupported attribute.
  34. 2007-05-02 Marek Habersack <[email protected]>
  35. * FormsAuthentication.cs: user names are stored in lowercase in
  36. the credentials database.
  37. 2007-04-29 Igor Zelmanovich <[email protected]>
  38. * FormsAuthenticationModule.cs:
  39. Redirect to login page doesn't cause thread abort.
  40. 2007-04-19 Igor Zelmanovich <[email protected]>
  41. * SqlMembershipProvider.cs:
  42. ChangePassword throws exception if new password has invalid format.
  43. 2007-04-17 Igor Zelmanovich <[email protected]>
  44. * Membership.cs:
  45. * Roles.cs:
  46. if default provider was not found ConfigurationErrorsException is thrown.
  47. 2007-04-12 Marek Habersack <[email protected]>
  48. * RoleManagerModule.cs: do not try to decrypt encryption tickets
  49. from cookies with empty values.
  50. 2007-04-04 Juraj Skripsky <[email protected]>
  51. * FormsAuthenticationModule.cs: Move initialization of _config out
  52. of Init() as app.Context is null in that method when a session is
  53. about to be terminated.
  54. 2007-03-21 Vladimir Krasnov <[email protected]>
  55. * AnonymousIdentificationModule.cs: optimized Config property
  56. 2007-03-21 Vladimir Krasnov <[email protected]>
  57. * AnonymousIdentificationModule.cs: added configuration section caching
  58. to AppDomain for TARGET_JVM
  59. * RoleManagerModule.cs:
  60. * UrlAuthorizationModule.cs:
  61. * FormsAuthenticationModule.cs: refactored configuration section to be
  62. a member of a class
  63. 2007-03-20 Marek Habersack <[email protected]>
  64. * FormsAuthentication.cs, Roles.cs: remove roles cookie on sign
  65. out. Fixes bug #81195. Patch from Mike Morano <[email protected]>.
  66. 2007-03-12 Marek Habersack <[email protected]>
  67. * RolePrincipal.cs: decrypt the roles ticket properly. Makes role
  68. caching in cookies work. Fixes bug #81117. Patch from Mike Morano
  69. <[email protected]>
  70. 2007-03-02 Marek Habersack <[email protected]>
  71. * SqlMembershipProvider.cs: cast PasswordFormat to int, so that
  72. the parameter code can infer the sql type. Makes user creation,
  73. password reset etc. work.
  74. 2007-02-28 Andreia Gaita <[email protected]>
  75. * SqlRoleProvider.cs: Fix parameter binding to stored procedures.
  76. * SqlMembershipProvider.cs: Fix parameter binding to stored procedures.
  77. CreateUser() doesn't use transactions in MS asp.net, so removed the
  78. transaction calls.
  79. 2007-02-19 Vladimir Krasnov <[email protected]>
  80. * RoleManagerModule.cs: fixed role chaching in OnEndRequest and
  81. OnPostAuthenticateRequest
  82. * RolePrincipal.cs: implemented ToEncryptedTicket, implemented caching
  83. role functionality
  84. * Roles.cs: implemented DeleteCookie, fixed CookieProtectionValue to
  85. get it's value from configuration
  86. 2007-02-08 Marek Habersack <[email protected]>
  87. * FormsAuthenticationModule.cs: Expire auth tickets properly.
  88. * MembershipProvider.cs: Do not clear the password before
  89. encrypting it.
  90. 2007-01-20 Miguel de Icaza <[email protected]>
  91. * SqlRoleProvider.cs: comment out unused code.
  92. * SqlMembershipProvider.cs: Removed unused variables.
  93. Remove unused variable.
  94. * AnonymousIdentificationModule.cs (ClearAnonymousIdentifier):
  95. remove unused variable. This might be a real bug.
  96. 2007-01-16 Vladimir Krasnov <[email protected]>
  97. * RoleManagerModule.cs: fixed OnPostAuthenticateRequest,
  98. CacheRolesInCookie not supported yet
  99. * Roles.cs: fixed DeleteCookie, CacheRolesInCookie not supported yet
  100. 2007-01-11 Adar Wesley <[email protected]>
  101. * MembershipProvider.cs: fixed EncryptPassword to use password buffer length
  102. 2007-01-04 Vladimir Krasnov <[email protected]>
  103. * AnonymousIdentificationModule.cs: fixed OnEnter, fixed failure on
  104. incorrect cookie value that browser may hold
  105. 2006-12-27 Vladimir Krasnov <[email protected]>
  106. * FormsAuthentication.cs: added internal ReturnUrl property,
  107. GetRedirectUrl added usage of ReturnUrl
  108. 2006-12-12 Vladimir Krasnov <[email protected]>
  109. * FormsAuthentication.cs: TARGET_J2EE define for static members
  110. 2006-12-06 Vladimir Krasnov <[email protected]>
  111. * FormsAuthenticationModule.cs: fixed OnAuthenticateRequest, suppress
  112. exception on wrong ticket
  113. 2006-12-03 Igor Zelmanovich <[email protected]>
  114. * FormsAuthenticationModule.cs:
  115. set SkipAuthorization=true for WebResource.axd
  116. 2006-11-27 Vladimir Krasnov <[email protected]>
  117. * SqlMembershipProvider.cs: typo bug
  118. 2006-11-21 Vladimir Krasnov <[email protected]>
  119. * SqlMembershipProvider.cs: fixed fixed exception type in GetPassword
  120. checks user lockout
  121. 2006-11-20 Igor Zelmanovich <[email protected]>
  122. * SqlMembershipProvider.cs: fixed: UpdateUser works properly.
  123. 2006-11-15 Igor Zelmanovich <[email protected]>
  124. * SqlMembershipProvider.cs: fixed: name is used for ReturnValue parameter.
  125. 2006-11-05 Vladimir Krasnov <[email protected]>
  126. * AnonymousIdentificationModule.cs: fixed anonymous id cookie
  127. 2006-11-05 Vladimir Krasnov <[email protected]>
  128. * MembershipProvider.cs, SqlMembershipProvider.cs:
  129. refactoring of DecryptPassword and EncryptPassword methods according
  130. to documentation
  131. 2006-09-10 Konstantin Triger <[email protected]>
  132. * SqlRoleProvider.cs: throw on empty connection string.
  133. 2006-09-26 Vladimir Krasnov <[email protected]>
  134. * Membership.cs: fixed GetAllUsers, typo bug
  135. * SqlRoleProvider.cs, SqlMembershipProvider.cs: refactored to use
  136. aspnetdb built in stored procedures,
  137. fixed application name and membership relation,
  138. improved exception handling
  139. 2006-09-03 Igor Zelmanovich <[email protected]>
  140. * RolePrincipal.cs: refactoring: instance can be serialized.
  141. 2006-09-03 Igor Zelmanovich <[email protected]>
  142. * SqlMembershipProvider.cs: fixed GetUser,
  143. when username is String.Empty methods returns null.
  144. 2006-08-31 Konstantin Triger <[email protected]>
  145. * SqlRoleProvider.cs: fixed initialization.
  146. 2006-08-31 Igor Zelmanovich <[email protected]>
  147. * SqlMembershipProvider.cs: fixed CreateUser,
  148. password is checked, properties MinRequiredPasswordLength and
  149. MinRequiredNonAlphanumericCharacters are considered.
  150. 2006-08-29 Konstantin Triger <[email protected]>
  151. * SqlMembershipProvider.cs: fix dispose order of reader vs connection.
  152. 2006-08-28 Igor Zelmanovich <[email protected]>
  153. * SqlMembershipProvider.cs: fixed CreateUser, parameter isApproved is
  154. considered.
  155. 2006-08-28 Konstantin Triger <[email protected]>
  156. * SqlMembershipProvider.cs: ensure GetUser() returns null if it cannot
  157. retrieve user information.
  158. 2006-08-28 Konstantin Triger <[email protected]>
  159. * SqlRoleProvider.cs, SqlMembershipProvider.cs:
  160. "use SqlClientFactory in case the ProviderName is not specified.
  161. 2006-08-27 Konstantin Triger <[email protected]>
  162. * SqlRoleProvider.cs: enable concurrent usage, refactoring.
  163. 2006-08-27 Konstantin Triger <[email protected]>
  164. * SqlMembershipProvider.cs: enable concurrent usage, refactoring.
  165. 2006-08-27 Vladimir Krasnov <[email protected]>
  166. * SqlMembershipProvider.cs: fixed ValidateUser, bug when user
  167. not exists
  168. 2006-08-14 Gonzalo Paniagua Javier <[email protected]>
  169. * FormsAuthentication.cs: set the Secure attribute of the authentication
  170. cookie when required.
  171. 2006-07-06 Konstantin Triger <[email protected]>
  172. * FormsAuthentication.cs: Ensure initialized, fix url mapping.
  173. 2006-05-03 Chris Toshok <[email protected]>
  174. * SqlMembershipProvider.cs (GetAlg): move this here for the time
  175. being, as it's the only class that uses it.
  176. (HashAndBase64Encode): nuke.
  177. (EncryptAndBase64Encode): nuke.
  178. (Base64DecodeAndDecrypt): nuke.
  179. (DecryptPassword): new function.
  180. (EncryptPassword): new function.
  181. (ChangePassword): replace the switch with a call to
  182. EncodePassword.
  183. (ChangePasswordQuestionAndAnswer): same.
  184. (CreateUser): same.
  185. (ResetPassword): same.
  186. (ValidateUsingPassword): same.
  187. (ValidateUsingPasswordAnswer): same.
  188. (GetPassword): same, and throw MembershipPasswordException if the
  189. password answer is incorrect.
  190. * MembershipProvider.cs (InitVector): nuke this. it's actually
  191. the salt from the database (for the sql provider, anyway).
  192. (EncodePassword): based on the password format, password, and
  193. salt, encode it. Makes use of EncryptPassword.
  194. (DecodePassword): likewise for decoding, makes use of
  195. DecryptPassword.
  196. (DecryptPassword): revert this to throwing
  197. NotImplementedException, as the sql provideroverrides it to
  198. perform the actual decryption.
  199. (EncryptPassword): same.
  200. 2006-05-02 Chris Toshok <[email protected]>
  201. * SqlMembershipProvider.cs: 85% complete, maybe more. The major
  202. functionality should work. Password retrieval (and encrypted
  203. passwords in general) is untested.
  204. 2006-05-01 Chris Toshok <[email protected]>
  205. * Membership.cs (GeneratePassword): don't include quotes (',",`)
  206. in the set of characters in the generated passwords.
  207. 2006-05-01 Chris Toshok <[email protected]>
  208. * MembershipProvider.cs (GetAlg): switch from Exception to
  209. ProviderException to match MS behavior (and fix the unit test.)
  210. * Membership.cs (GeneratePassword): implement.
  211. 2006-05-01 Chris Toshok <[email protected]>
  212. * SqlMembershipProvider.cs: lots more work. checking this in in
  213. its present state because I don't want to lose it. It still needs
  214. work.
  215. * Membership.cs (.cctor): remove the fallback.
  216. (ValidatingPassword): remove the MonoTODO.
  217. * MembershipProvider.cs (DecryptPassword): implement.
  218. (EncryptPassword): implement.
  219. (GetAlg): helper function for Decrypt/EncryptPassword.
  220. (InitVector): same.
  221. 2006-04-27 Chris Toshok <[email protected]>
  222. * SqlMembershipProvider.cs (GeneratePassword): call
  223. Membership.GeneratePassword with the configured minimum strength
  224. requirements.
  225. 2006-04-27 Chris Toshok <[email protected]>
  226. * SqlMembershipProvider.cs (UnlockUser): fix sql query, and move
  227. the CheckPararm call to the top of the method.
  228. 2006-04-12 Chris Toshok <[email protected]>
  229. * SqlMembershipProvider.cs: commit initial pass at
  230. SqlMembershipProvider work. lots of stuff untested in here.
  231. 2006-04-11 Chris Toshok <[email protected]>
  232. * MembershipUser.cs (.ctor): per Shackow's book, all DateTime's
  233. are converted using ToUniversalTime when passed into this class.
  234. (UpdateSelf): update ourselves from the passed in MembershipUser,
  235. swallowing NotSupportedExceptions.
  236. (UpdateUser): fetch a new MembershipUser from the db and call
  237. UpdateSelf with it.
  238. (ChangePassword): call UpdateUser after changing the password.
  239. (ChangePasswordQuestionAndAnswer): same.
  240. (ResetPassword): same.
  241. (UnlockUser): same. Also, don't explicitly set isLockedOut.
  242. It'll be updated in UpdateSelf.
  243. (CreationDate): getter calls ToLocalTime, setter calls
  244. ToUniversalTime.
  245. (LastActivityDate): same.
  246. (LastLoginDate): same.
  247. (LastPasswordChangedDate): same.
  248. (LastLockoutDate): same.
  249. * Membership.cs (.cctor): use
  250. ProvidersHelper.InstantitateProviders, and remove some unnecessary
  251. #if NET_2_0's.
  252. 2006-03-29 Chris Toshok <[email protected]>
  253. * SqlRoleProvider.cs: do the LOWER's in SQL, not in C#.
  254. 2006-03-23 Chris Toshok <[email protected]>
  255. * Roles.cs: make this 2.0 configuration aware.
  256. * SqlRoleProvider.cs: flesh out all the operations. the only
  257. things that need dealing with are the Initialize method's handling
  258. of a few parameters, and the ApplicationName property.
  259. 2006-03-23 Chris Toshok <[email protected]>
  260. * DefaultAuthenticationModule.cs (OnDefaultAuthentication): always
  261. set Thread.CurrentPrincipal, not just if we set it to the
  262. GenericPrincipal.
  263. 2006-03-22 Chris Toshok <[email protected]>
  264. * RoleManagerModule.cs: implement using info in Shackow's book.
  265. * RolePrincipal.cs: flesh this out a bit more.
  266. * DefaultAuthenticationModule.cs (OnDefaultAuthentication):
  267. according to Shackow's book, this sets Thread.CurrentPrincipal as
  268. well as HttpContext.Current.User.
  269. 2006-02-28 Chris Toshok <[email protected]>
  270. * FormsAuthentication.cs: corcompare work.
  271. * MembershipCreateUserException.cs: same.
  272. * MembershipPasswordException.cs: same.
  273. * AnonymousIdentificationModule.cs: same.
  274. 2006-02-01 Chris Toshok <[email protected]>
  275. * FormsAuthentication.cs, Membership.cs,
  276. FormsAuthenticationModule.cs, UrlAuthorizationModule.cs: oops,
  277. replace GetWebApplicationSection with GetSection.
  278. 2006-02-01 Chris Toshok <[email protected]>
  279. * FormsAuthentication.cs: CONFIGURATION_2_0 => NET_2_0.
  280. simplifies the ifdef mess quite a bit.
  281. * Membership.cs: same.
  282. * FormsAuthenticationModule.cs: same.
  283. * UrlAuthorizationModule.cs: same.
  284. 2006-01-04 Chris Toshok <[email protected]>
  285. * FormsAuthentication.cs (Authenticate): add CONFIGURATION_2_0
  286. code.
  287. (Decrypt2): same.
  288. (Decrypt): same.
  289. (Encrypt): same.
  290. (Initialize): same.
  291. 2006-01-04 Chris Toshok <[email protected]>
  292. * Membership.cs (.cctor): enable the code here under
  293. CONFIGURATION_2_0.
  294. 2006-01-03 Chris Toshok <[email protected]>
  295. * UrlAuthorizationModule.cs (OnAuthorizeRequest): add
  296. CONFIGURATION_2_0 code here.
  297. 2005-12-22 Gonzalo Paniagua Javier <[email protected]>
  298. * FormsAuthentication.cs: don't end the request in
  299. RedirectFromLoginPage.
  300. 2005-12-22 Gonzalo Paniagua Javier <[email protected]>
  301. * FormsAuthenticationModule.cs: expire the cookie. Fixes bug #77043.
  302. Patch by Cyrille Colin.
  303. 2005-12-13 Gonzalo Paniagua Javier <[email protected]>
  304. * FormsAuthenticationModule.cs: ignore any exception thrown when mapping
  305. the provided virtual path to the physical one. Patch by Cyrille Colin.
  306. 2005-11-28 Chris Toshok <[email protected]>
  307. * FormsAuthenticationModule.cs (OnAuthenticateRequest):
  308. CONFIGURATION_2_0 work.
  309. (OnEndRequest): same.
  310. 2005-09-09 Sebastien Pouliot <[email protected]>
  311. * DefaultAuthenticationEventArgs.cs: Added LinkDemand for Minimal.
  312. * DefaultAuthenticationModule.cs: Added LinkDemand for Minimal. Added
  313. Demand for UnmanagedCode on constructor.
  314. * FileAuthorizationModule.cs: Added LinkDemand for Minimal. Added
  315. Demand for UnmanagedCode on constructor.
  316. * FormsAuthentication.cs: Added LinkDemand for Minimal.
  317. * FormsAuthenticationEventArgs.cs: Added LinkDemand for Minimal.
  318. * FormsAuthenticationModule.cs: Added LinkDemand for Minimal. Added
  319. Demand for UnmanagedCode on constructor.
  320. * FormsAuthenticationTicket.cs: Added LinkDemand for Minimal.
  321. * FormsIdentity.cs: Added LinkDemand for Minimal.
  322. * PassportAuthenticationEventArgs.cs: Added LinkDemand for Minimal.
  323. * PassportAuthenticationModule.cs: Added LinkDemand for Minimal. Added
  324. Demand for UnmanagedCode on constructor.
  325. * PassportIdentity.cs: Added LinkDemand for Minimal. Added Demand for
  326. UnmanagedCode on constructor.
  327. * UrlAuthorizationModule.cs: Added LinkDemand for Minimal. Added
  328. Demand for UnmanagedCode on constructor.
  329. * WindowsAuthenticationEventArgs.cs: Added LinkDemand for Minimal.
  330. * WindowsAuthenticationModule.cs: Added LinkDemand for Minimal. Added
  331. Demand for UnmanagedCode on constructor.
  332. 2005-09-01 Sebastien Pouliot <[email protected]>
  333. * FormsAuthenticationEventArgs.cs: Ensure the setter for User is
  334. protected by a demand for ControlPrincipal.
  335. * PassportAuthenticationEventArgs.cs: Ensure the setter for User is
  336. protected by a demand for ControlPrincipal.
  337. * WindowsAuthenticationEventArgs.cs: Ensure the setter for User is
  338. protected by a demand for ControlPrincipal.
  339. 2005-08-25 Sebastien Pouliot <[email protected]>
  340. * FormsAuthentication.cs: With 2.0 we can get the default properties
  341. and call Initialize without a NRE.
  342. 2005-08-25 Sebastien Pouliot <[email protected]>
  343. * ActiveDirectoryConnectionProtection.cs: New (2.0) enum.
  344. * ActiveDirectoryMembershipProvider.cs: Fixed 2.0 API.
  345. * AnonymousIdentificationEventArgs.cs: Fixed AnonymousID property case.
  346. * AnonymousIdentificationModule.cs: Fixed 2.0 API.
  347. * FileAuthorizationModule.cs: Added static CheckFileAccessForUser in
  348. 2.0 profile (TODO).
  349. * FormsAuthentication.cs: Added missing 2.0 properties with their
  350. default values.
  351. * MembershipCreateStatus.cs: Fixed enum values/names.
  352. * MembershipProvider.cs: Added stub for [Decrypt|Encrypt]Password. Both
  353. methods don't seems to work without an active provider.
  354. * PassportIdentity.cs: Added IDispose for 2.0 profile.
  355. * Roles.cs: Added missing beta2 bits and default values (which are the
  356. only things working without a role provider (web.config).
  357. * RolePrincipal.cs: Fixed 2.0 API. Implemented a few bits.
  358. * SqlRoleProvider.cs: Fixed 2.0 API.
  359. * UrlAuthorizationModule.cs: Added static CheckUrlAccessForPrincipal in
  360. 2.0 profile (TODO).
  361. 2005-08-24 Sebastien Pouliot <[email protected]>
  362. * MembershipUserCollection.cs: Fix exceptions.
  363. 2005-08-22 Sebastien Pouliot <[email protected]>
  364. * FormsAuthentication.cs: Add some 2.0 stuff required for Login*
  365. controls to compile.
  366. 2005-08-18 Sebastien Pouliot <[email protected]>
  367. * Membership.cs: Commented unworking parts of the .cctor to allow
  368. testing the Login control.
  369. * MembershipProviderCollection.cs: Fixed exception handling.
  370. * SqlMembershipProvider.cs: Don't throw NotImplementedException
  371. everywhere so Membership's .cctor (somewhat) works. Removed
  372. Description property (not in beta2).
  373. 2005-07-28 Gonzalo Paniagua Javier <[email protected]>
  374. * FormsAuthentication.cs: allow hardware acceleration support if
  375. available. Sebastien dixit.
  376. 2005-07-26 Gonzalo Paniagua Javier <[email protected]>
  377. * FormsAuthentication.cs: the init_vector must be the same accross
  378. restarts, otherwise the cookie does not work even when a decryption
  379. key is provided. Initialize it to the bytes of the cookie name. Fixes
  380. bug #75635.
  381. 2005-07-25 Eyal Alaluf <[email protected]>
  382. * FormsAuthenticationModule.cs: Check for null config
  383. 2005-07-25 Miguel de Icaza <[email protected]>
  384. * FormsAuthentication.cs (SignOut): Force the cookie to have it
  385. expire in the past.
  386. 2005-07-25 Gonzalo Paniagua Javier <[email protected]>
  387. * FormsAuthentication.cs: my previous patch missed a "small" detail: it
  388. didn't include the verification key when computing/checking the
  389. validation hash. Now this is really a MAC or HMAC or...
  390. 2005-07-25 Gonzalo Paniagua Javier <[email protected]>
  391. * FormsAuthentication.cs:
  392. * FormsAuthenticationTicket.cs: added support for validation and
  393. encryption of the auth. cookie and improved serialization of the ticket.
  394. 2005-07-01 Lluis Sanchez Gual <[email protected]>
  395. * Membership.cs: Read provider info from the config file.
  396. 2005-06-10 Lluis Sanchez Gual <[email protected]>
  397. * MembershipUserCollection.cs:
  398. * MembershipPasswordException.cs:
  399. * RoleProviderCollection.cs:
  400. * ActiveDirectoryMembershipProvider.cs:
  401. * SqlMembershipProvider.cs:
  402. * MembershipProvider.cs:
  403. * SqlRoleProvider.cs:
  404. * Membership.cs:
  405. * MembershipUser.cs:
  406. * MembershipProviderCollection.cs:
  407. * Roles.cs:.
  408. * RoleProvider.cs: Track api changes in ASP.NET 2.0. Implemented
  409. some missing methods.
  410. * AccessRoleProvider.cs:
  411. * AccessMembershipProvider.cs: Removed.
  412. * MembershipCreateUserException.cs:
  413. * MembershipValidatePasswordEventHandler.cs:
  414. * ValidatePasswordEventArgs.cs: Implemented.
  415. 2005-05-21 Sebastien Pouliot <[email protected]>
  416. * FormsAuthentication.cs: Hash the UTF8 representation of the password
  417. strings (to be compatible with Microsoft implementation).
  418. 2005-04-20 Gonzalo Paniagua Javier <[email protected]>
  419. * FormsAuthentication.cs:
  420. * PassportAuthenticationModule.cs:
  421. * WindowsAuthenticationModule.cs: removed warnings.
  422. 2005-03-11 Gonzalo Paniagua Javier <[email protected]>
  423. * FormsAuthenticationModule.cs: fix for bug 73545, which caused
  424. authentication not to work when the cookie was not persistent.
  425. Patch by Ilya Kharmatsky (Mainsoft).
  426. 2005-02-23 Gonzalo Paniagua Javier <[email protected]>
  427. * FormsAuthentication.cs: make the string to be stored in a config.
  428. file uppercase... See bug #72557.
  429. 2005-02-06 Gonzalo Paniagua Javier <[email protected]>
  430. * FormsAuthentication.cs: fixed typo when getting the hash for the
  431. password in SHA1 and MD5. Thanks to Tadas Dailyda.
  432. Lock on a static object instead of typeof(FormsAuthentication).
  433. 2004-11-18 Lluis Sanchez Gual <[email protected]>
  434. * RoleProvider.cs, Roles.cs, SqlRoleProvider.cs, RoleProviderCollection.cs,
  435. AccessRoleProvider.cs: IRoleProvider has been renamed to ProviderBase.
  436. * IMembershipProvider.cs: Deleted.
  437. * MembershipProvider.cs, AccessMembershipProvider.cs, MembershipUser.cs,
  438. Membership.cs, ADMembershipProvider.cs, SqlMembershipProvider.cs
  439. MembershipProviderCollection.cs: MembershipProvider has been deleted
  440. and replaced by the abstract class MembershipProvider.
  441. * MembershipProviderCollection.cs: Minor fixes.
  442. * ADMembershipProvider.cs: Renamed to ActiveDirectoryMembershipProvider.cs.
  443. 2004-11-15 Lluis Sanchez Gual <[email protected]>
  444. * RoleProviderCollection.cs, MembershipProviderCollection.cs:
  445. Fixed warnings.
  446. 2004-08-23 Gonzalo Paniagua Javier <[email protected]>
  447. * FormsAuthentication.cs: patch by Jim Pease to fix the date on renewal.
  448. 2004-08-22 Gonzalo Paniagua Javier <[email protected]>
  449. * FormsAuthenticationModule.cs: don't renew expired cookies. Only renew
  450. the cookie if SlidingExpiration is set. Thanks to Jim Pease.
  451. 2004-08-03 Sanjay Gupta <[email protected]>
  452. * MembershipSortOptions.cs:
  453. * MembershipPasswordFormat.cs:
  454. * MembershipOnlineStatus.cs:
  455. * MembershipCreateStatus.cs:
  456. * CookieProtection.cs: minor modifications.
  457. 2004-06-12 Pedro Martnez Juli <[email protected]>
  458. * FormsAuthentication.cs: Undo last change.
  459. 2004-06-12 Pedro Martnez Juli <[email protected]>
  460. * FormsAuthentication.cs: go to loginUrl from web.config settings
  461. before try with the default ones.
  462. 2004-06-11 Gonzalo Paniagua Javier <[email protected]>
  463. * DefaultAuthenticationModule.cs: set the IPrincipal for this thread
  464. once we have a user. Fixes bug #59683.
  465. 2004-04-21 Gonzalo Paniagua Javier <[email protected]>
  466. * FormsAuthenticationModule.cs: re-read configuration files if needed
  467. when determining if forms auth. is used.
  468. 2004-01-23 Gonzalo Paniagua Javier <[email protected]>
  469. * FormsAuthentication.cs: added RequireSSL and SlidingExpiration.
  470. 2004-01-11 Andreas Nahr <[email protected]>
  471. * PassportIdentity.cs: Added v 1.1 members
  472. 2003-11-25 Ben Maurer <[email protected]>
  473. * AccessMembershipProvider.cs: New v2 file
  474. * AccessRoleProvider.cs: New v2 file
  475. * ADMembershipProvider.cs: New v2 file
  476. * AnonymousIdentificationEventArgs.cs: New v2 file
  477. * AnonymousIdentificationEventHandler.cs: New v2 file
  478. * AnonymousIdentificationModule.cs: New v2 file
  479. * CookieProtection.cs: New v2 file
  480. * IMembershipProvider.cs: New v2 file
  481. * IRoleProvider.cs: New v2 file
  482. * Membership.cs: New v2 file
  483. * MembershipCreateStatus.cs: New v2 file
  484. * MembershipCreateUserException.cs: New v2 file
  485. * MembershipOnlineStatus.cs: New v2 file
  486. * MembershipPasswordException.cs: New v2 file
  487. * MembershipPasswordFormat.cs: New v2 file
  488. * MembershipProviderCollection.cs: New v2 file
  489. * MembershipSortOptions.cs: New v2 file
  490. * MembershipUser.cs: New v2 file
  491. * MembershipUserCollection.cs: New v2 file
  492. * RoleManagerEventArgs.cs: New v2 file
  493. * RoleManagerEventHandler.cs: New v2 file
  494. * RoleManagerModule.cs: New v2 file
  495. * RolePrincipal.cs: New v2 file
  496. * RoleProviderCollection.cs: New v2 file
  497. * Roles.cs: New v2 file
  498. * SqlMembershipProvider.cs: New v2 file
  499. * SqlRoleProvider.cs: New v2 file
  500. 2003-11-05 Gonzalo Paniagua Javier <[email protected]>
  501. * FormsAuthentication.cs: encoding updates.
  502. 2003-10-04 Gonzalo Paniagua Javier <[email protected]>
  503. * FormsAuthenticationModule.cs: fixed for applications other than /.
  504. 2003-08-27 Gonzalo Paniagua Javier <[email protected]>
  505. * UrlAuthorizationModule.cs: fixed description for status code.
  506. 2003-07-31 Gonzalo Paniagua Javier <[email protected]>
  507. * FormsAuthenticationModule.cs: really renew the ticket. Thanks to
  508. Jens Thiel <[email protected]>.
  509. 2003-02-13 Gonzalo Paniagua Javier <[email protected]>
  510. * UrlAuthorizationModule.cs: tell the application not to run any other
  511. step apart from EndRequest.
  512. 2003-02-12 Gonzalo Paniagua Javier <[email protected]>
  513. * FormsAuthentication.cs: implemented RedirectFromLoginPage and
  514. GetRedirectUrl.
  515. * FormsAuthenticationModule.cs: redirect to the login page when a 401
  516. error happens.
  517. * UrlAuthorizationModule.cs: check for valid user or render error page.
  518. 2003-01-04 Gonzalo Paniagua Javier <[email protected]>
  519. * DefaultAuthenticationModule.cs: implemented. It just create a default
  520. unauthenticated user when no one else provided one.
  521. * FormsAuthenticationModule.cs: removed debug output.
  522. 2002-12-20 Gonzalo Paniagua Javier <[email protected]>
  523. * FormsAuthenticationModule.cs: remove debug lines.
  524. 2002-12-19 Gonzalo Paniagua Javier <[email protected]>
  525. * FormsAuthentication.cs: return a null ticket when an exception is
  526. thrown creating it. Implemented RenewTicketIfOld.
  527. * FormsAuthenticationModule.cs: implemented event handlers for
  528. AuthenticateRequest and EndRequest.
  529. * FormsAuthenticationTicket.cs: implemented SetDates and Clone methods.
  530. 2002-12-18 Gonzalo Paniagua Javier <[email protected]>
  531. * FormsAuthentication.cs: implemented GetAuthCookie, SetAuthCookie,
  532. SignOut, FormsCookieName and FormsCookiePath.
  533. 2002-12-17 Gonzalo Paniagua Javier <[email protected]>
  534. * FormsAuthentication.cs: implemented Authenticate, unencrypted Encrypt
  535. and Decrypt, HashPasswordForStoringInConfigFile and Initialize.
  536. * FormsAuthenticationTicket.cs: set cookiePath to the default when no
  537. other provided.
  538. 2002-08-26 Gonzalo Paniagua Javier <[email protected]>
  539. * DefaultAuthenticationEventHandler.cs:
  540. * DefaultAuthenticationModule.cs:
  541. * FileAuthorizationModule.cs:
  542. * FormsAuthentication.cs:
  543. * FormsAuthenticationEventArgs.cs:
  544. * FormsAuthenticationEventHandler.cs:
  545. * FormsAuthenticationModule.cs:
  546. * FormsAuthenticationTicket.cs:
  547. * FormsIdentity.cs:
  548. * PassportAuthenticationEventArgs.cs:
  549. * PassportAuthenticationEventHandler.cs:
  550. * PassportAuthenticationModule.cs:
  551. * PassportIdentity.cs:
  552. * UrlAuthorizationModule.cs:
  553. * WindowsAuthenticationEventArgs.cs:
  554. * WindowsAuthenticationEventHandler.cs:
  555. * WindowsAuthenticationModule.cs: new files. Some of them implemented,
  556. some others stubbed out.
  557. 2002-06-03 Gonzalo Paniagua Javier <[email protected]>
  558. * DefaultAuthenticationEventArgs.cs: added file.