C# Класс DotNetOpenAuth.ApplicationBlock.InMemoryTokenManager

A token manager that only retains tokens in memory. Meant for SHORT TERM USE TOKENS ONLY.

A likely application of this class is for "Sign In With Twitter", where the user only signs in without providing any authorization to access Twitter APIs except to authenticate, since that access token is only useful once.

Наследование: IConsumerTokenManager, IOpenIdOAuthTokenManager

Показать файл Открыть проект Примеры использования класса

Открытые методы

Метод	Описание
ExpireRequestTokenAndStoreNewAccessToken ( string consumerKey, string requestToken, string accessToken, string accessTokenSecret ) : void	Deletes a request token and its associated secret and stores a new access token and secret. Any scope of granted privileges associated with the request token from the original call to StoreNewRequestToken should be carried over to the new Access Token. To associate a user account with the new access token, HttpContext.Current.User may be useful in an ASP.NET web application within the implementation of this method. Alternatively you may store the access token here without associating with a user account, and wait until WebConsumer.ProcessUserAuthorization() or DesktopConsumer.ProcessUserAuthorization(string, string) return the access token to associate the access token with a user account at that point.
GetTokenSecret ( string token ) : string	Gets the Token Secret given a request or access token.
GetTokenType ( string token ) : TokenType	Classifies a token as a request token or an access token.
InMemoryTokenManager ( string consumerKey, string consumerSecret ) : System	Initializes a new instance of the InMemoryTokenManager class.
StoreNewRequestToken ( DotNetOpenAuth.OAuth.Messages.UnauthorizedTokenRequest request, ITokenSecretContainingMessage response ) : void	Stores a newly generated unauthorized request token, secret, and optional application-specific parameters for later recall. Request tokens stored by this method SHOULD NOT associate any user account with this token. It usually opens up security holes in your application to do so. Instead, you associate a user account with access tokens (not request tokens) in the ExpireRequestTokenAndStoreNewAccessToken method.
StoreOpenIdAuthorizedRequestToken ( string consumerKey, DotNetOpenAuth.OpenId.Extensions.OAuth.AuthorizationApprovedResponse authorization ) : void	Stores a new request token obtained over an OpenID request. The token secret is the empty string. Tokens stored by this method should be short-lived to mitigate possible security threats. Their lifetime should be sufficient for the relying party to receive the positive authentication assertion and immediately send a follow-up request for the access token.

Описание методов

ExpireRequestTokenAndStoreNewAccessToken() публичный Метод

Deletes a request token and its associated secret and stores a new access token and secret.

Any scope of granted privileges associated with the request token from the original call to StoreNewRequestToken should be carried over to the new Access Token.

To associate a user account with the new access token, HttpContext.Current.User may be useful in an ASP.NET web application within the implementation of this method. Alternatively you may store the access token here without associating with a user account, and wait until WebConsumer.ProcessUserAuthorization() or DesktopConsumer.ProcessUserAuthorization(string, string) return the access token to associate the access token with a user account at that point.

public ExpireRequestTokenAndStoreNewAccessToken ( string consumerKey, string requestToken, string accessToken, string accessTokenSecret ) : void
consumerKey	string	The Consumer that is exchanging its request token for an access token.
requestToken	string	The Consumer's request token that should be deleted/expired.
accessToken	string	The new access token that is being issued to the Consumer.
accessTokenSecret	string	The secret associated with the newly issued access token.
Результат	void

GetTokenSecret() публичный Метод

Gets the Token Secret given a request or access token.

Thrown if the secret cannot be found for the given token.

public GetTokenSecret ( string token ) : string
token	string	The request or access token.
Результат	string

GetTokenType() публичный Метод

Classifies a token as a request token or an access token.

public GetTokenType ( string token ) : TokenType
token	string	The token to classify.
Результат	TokenType

InMemoryTokenManager() публичный Метод

Initializes a new instance of the InMemoryTokenManager class.

public InMemoryTokenManager ( string consumerKey, string consumerSecret ) : System
consumerKey	string	The consumer key.
consumerSecret	string	The consumer secret.
Результат	System

StoreNewRequestToken() публичный Метод

Stores a newly generated unauthorized request token, secret, and optional application-specific parameters for later recall.

Request tokens stored by this method SHOULD NOT associate any user account with this token. It usually opens up security holes in your application to do so. Instead, you associate a user account with access tokens (not request tokens) in the ExpireRequestTokenAndStoreNewAccessToken method.

Thrown if the consumer key is not registered, or a required parameter was not found in the parameters collection.

public StoreNewRequestToken ( DotNetOpenAuth.OAuth.Messages.UnauthorizedTokenRequest request, ITokenSecretContainingMessage response ) : void
request	DotNetOpenAuth.OAuth.Messages.UnauthorizedTokenRequest	The request message that resulted in the generation of a new unauthorized request token.
response	ITokenSecretContainingMessage	The response message that includes the unauthorized request token.
Результат	void

StoreOpenIdAuthorizedRequestToken() публичный Метод

Stores a new request token obtained over an OpenID request.

The token secret is the empty string.

Tokens stored by this method should be short-lived to mitigate possible security threats. Their lifetime should be sufficient for the relying party to receive the positive authentication assertion and immediately send a follow-up request for the access token.

public StoreOpenIdAuthorizedRequestToken ( string consumerKey, DotNetOpenAuth.OpenId.Extensions.OAuth.AuthorizationApprovedResponse authorization ) : void
consumerKey	string	The consumer key.
authorization	DotNetOpenAuth.OpenId.Extensions.OAuth.AuthorizationApprovedResponse	The authorization message carrying the request token and authorized access scope.
Результат	void