importing messaging-2008 branch to trunk.
[mono.git] / mcs / class / System.Web / System.Web.Security / ChangeLog
index 2e6e4a066e0916b013687bfc374e3c03c2f2a7a0..1a0ca21ab6532f9f055357810146523a9e9fe7b6 100644 (file)
@@ -1,3 +1,223 @@
+2008-08-20  Marek Habersack  <mhabersack@novell.com>
+
+       * Membership.cs: implemented the HashAlgorithmType property. Fixes
+       bug #418458
+
+2008-06-30  Marek Habersack  <mhabersack@novell.com>
+
+       * SqliteMembershipProvider.cs, SqliteRoleProvider.cs: remove
+       unused method
+
+       * SqlRoleProvider.cs, AspNetDBSchemaChecker.cs: hush the warnings
+
+2008-05-30  Marek Habersack  <mhabersack@novell.com>
+
+       * AnonymousIdentificationModule.cs, FormsAuthenticationModule.cs,
+       DefaultAuthenticationModule.cs, MembershipProvider.cs,
+       WindowsAuthenticationModule.cs, PassportAuthenticationModule.cs,
+       RoleManagerModule.cs: do not use synthetized event accessors (to
+       avoid locks).
+
+2008-05-07  Marek Habersack  <mhabersack@novell.com>
+
+       * RolePrincipal.cs: fix:
+               - Reloading the roles cache from the provider when expired
+               - Update issue & expiry date for expired tickets
+               - Incrementing the cookie expiry date
+               - Obey Roles.MaxCachedResults
+         Fixes bug #385877. Patch from Ivan Hamilton
+               <ivan@chimerical.com.au>, thanks!
+
+2008-03-10  Marek Habersack  <mhabersack@novell.com>
+
+       * RoleManagerModule.cs: initialize _config before adding event
+       handlers and account for the fact that _config might still be null
+       in the methods that use it.
+
+2007-12-30  Vladimir Krasnov  <vladimirk@mainsoft.com>
+
+       * SqliteMembershipProvider.cs, SqlRoleProvider.cs: added chema checking
+       * added AspNetDBSchemaChecker.cs: schema checker helper class
+
+2007-12-11  Vladimir Krasnov  <vladimirk@mainsoft.com>
+
+       * Roles.cs: fixed Providers property to be thread safe
+
+2007-12-08  Marek Habersack  <mhabersack@novell.com>
+
+       * SqliteRoleProvider.cs: added - a Role Provider for
+       Sqlite, based on PostgreSQL Role Provider code from Daniel
+       Nauck <dna@informatik.uni-kiel.de>
+
+       * SqliteMembershipProvider.cs: added - a Membership Provider for
+       Sqlite, based on PostgreSQL Membership Provider code from Daniel
+       Nauck <dna@informatik.uni-kiel.de>
+
+2007-11-28  Marek Habersack  <mhabersack@novell.com>
+
+       * SqlMembershipProvider.cs: handle situation when there is no
+       connection string configured for the SQL Membership Provider.
+
+2007-11-01  Marek Habersack  <mhabersack@novell.com>
+
+       * RolePrincipal.cs, MembershipProvider.cs: use the new
+       MachineKeySectionUtils class wherever necessary.
+
+       * FormsAuthentication.cs: use the new MachineKeySectionUtils class
+       wherever necessary.
+       GetHexString is a private method again.
+
+2007-10-31  Marek Habersack  <mhabersack@novell.com>
+
+       * FormsAuthentication.cs: made GetHexString an internal method -
+       it is used in the AssemblyResourceLoader.cs
+
+2007-08-14  Marek Habersack  <mhabersack@novell.com>
+
+       * Roles.cs: remove unused field.
+
+       * SqlMembershipProvider.cs: remove unused variable.
+
+2007-08-13 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * SqlRoleProvider.cs: fixed ApplicationName initialization
+
+2007-06-24 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * FormsAuthentication.cs: improved performance of GetHexString()
+
+2007-05-17 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * SqlMembershipProvider.cs: fixed DeleteUser, fixed parameter name
+
+2007-05-14 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * SqlMembershipProvider.cs: Fix parameter binding to stored procedures.
+
+2007-05-09 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * PassportIdentity.cs:
+       added MonoNotSupported attribute.       
+
+2007-05-02  Marek Habersack  <mhabersack@novell.com>
+
+       * FormsAuthentication.cs: user names are stored in lowercase in
+       the credentials database.
+
+2007-04-29 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * FormsAuthenticationModule.cs: 
+       Redirect to login page doesn't cause thread abort.      
+
+2007-04-19 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * SqlMembershipProvider.cs:
+       ChangePassword throws exception if new password has invalid format.     
+
+2007-04-17 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * Membership.cs:
+       * Roles.cs:
+       if default provider was not found ConfigurationErrorsException is thrown.
+
+2007-04-12  Marek Habersack  <mhabersack@novell.com>
+
+       * RoleManagerModule.cs: do not try to decrypt encryption tickets
+       from cookies with empty values.
+
+2007-04-04 Juraj Skripsky <js@hotfeet.ch>
+
+       * FormsAuthenticationModule.cs: Move initialization of _config out
+       of Init() as app.Context is null in that method when a session is
+       about to be terminated.
+
+2007-03-21 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * AnonymousIdentificationModule.cs: optimized Config property
+
+2007-03-21 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * AnonymousIdentificationModule.cs: added configuration section caching
+       to AppDomain for TARGET_JVM
+       * RoleManagerModule.cs:
+       * UrlAuthorizationModule.cs:
+       * FormsAuthenticationModule.cs: refactored configuration section to be
+       a member of a class
+
+2007-03-20  Marek Habersack  <mhabersack@novell.com>
+
+       * FormsAuthentication.cs, Roles.cs: remove roles cookie on sign
+       out. Fixes bug #81195. Patch from Mike Morano <mmorano@mikeandwan.us>.
+
+2007-03-12  Marek Habersack  <mhabersack@novell.com>
+
+       * RolePrincipal.cs: decrypt the roles ticket properly. Makes role
+       caching in cookies work. Fixes bug #81117. Patch from Mike Morano
+       <mmorano@mikeandwan.us>
+
+2007-03-02  Marek Habersack  <mhabersack@novell.com>
+
+       * SqlMembershipProvider.cs: cast PasswordFormat to int, so that
+       the parameter code can infer the sql type. Makes user creation,
+       password reset etc. work.
+
+2007-02-28  Andreia Gaita  <avidigal@novell.com>
+
+       * SqlRoleProvider.cs: Fix parameter binding to stored procedures.
+       * SqlMembershipProvider.cs: Fix parameter binding to stored procedures.
+       CreateUser() doesn't use transactions in MS asp.net, so removed the 
+       transaction calls.
+
+2007-02-19 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * RoleManagerModule.cs: fixed role chaching in OnEndRequest and
+       OnPostAuthenticateRequest
+       * RolePrincipal.cs: implemented ToEncryptedTicket, implemented caching
+       role functionality
+       * Roles.cs: implemented DeleteCookie, fixed CookieProtectionValue to
+       get it's value from configuration
+
+2007-02-08  Marek Habersack  <grendello@gmail.com>
+
+       * FormsAuthenticationModule.cs: Expire auth tickets properly.
+
+       * MembershipProvider.cs: Do not clear the password before
+       encrypting it. 
+
+2007-01-20  Miguel de Icaza  <miguel@novell.com>
+
+       * SqlRoleProvider.cs: comment out unused code.
+
+       * SqlMembershipProvider.cs: Removed unused variables.
+       Remove unused variable.
+
+       * AnonymousIdentificationModule.cs (ClearAnonymousIdentifier):
+       remove unused variable.   This might be a real bug.
+
+2007-01-16 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * RoleManagerModule.cs: fixed OnPostAuthenticateRequest,
+       CacheRolesInCookie not supported yet
+       * Roles.cs: fixed DeleteCookie, CacheRolesInCookie not supported yet
+
+2007-01-11 Adar Wesley <adarw@mainsoft.com>
+
+       * MembershipProvider.cs: fixed EncryptPassword to use password buffer length
+
+2007-01-04 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * AnonymousIdentificationModule.cs: fixed OnEnter, fixed failure on
+       incorrect cookie value that browser may hold
+
+2006-12-27 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * FormsAuthentication.cs: added internal ReturnUrl property,
+       GetRedirectUrl added usage of ReturnUrl
+
+2006-12-12 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * FormsAuthentication.cs: TARGET_J2EE define for static members
+
 2006-12-06 Vladimir Krasnov <vladimirk@mainsoft.com>
 
        * FormsAuthenticationModule.cs: fixed OnAuthenticateRequest, suppress