2007-10-31 Marek Habersack <mhabersack@novell.com>
[mono.git] / mcs / class / System.Web / System.Web.Security / ChangeLog
index 54898c2d095721ba176e55d0202d3751c5aa3f78..97f33f9c41b523cd79a62374114ad4f842e183f9 100644 (file)
@@ -1,3 +1,212 @@
+2007-10-31  Marek Habersack  <mhabersack@novell.com>
+
+       * FormsAuthentication.cs: made GetHexString an internal method -
+       it is used in the AssemblyResourceLoader.cs
+
+2007-08-14  Marek Habersack  <mhabersack@novell.com>
+
+       * Roles.cs: remove unused field.
+
+       * SqlMembershipProvider.cs: remove unused variable.
+
+2007-08-13 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * SqlRoleProvider.cs: fixed ApplicationName initialization
+
+2007-06-24 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * FormsAuthentication.cs: improved performance of GetHexString()
+
+2007-05-17 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * SqlMembershipProvider.cs: fixed DeleteUser, fixed parameter name
+
+2007-05-14 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * SqlMembershipProvider.cs: Fix parameter binding to stored procedures.
+
+2007-05-09 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * PassportIdentity.cs:
+       added MonoNotSupported attribute.       
+
+2007-05-02  Marek Habersack  <mhabersack@novell.com>
+
+       * FormsAuthentication.cs: user names are stored in lowercase in
+       the credentials database.
+
+2007-04-29 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * FormsAuthenticationModule.cs: 
+       Redirect to login page doesn't cause thread abort.      
+
+2007-04-19 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * SqlMembershipProvider.cs:
+       ChangePassword throws exception if new password has invalid format.     
+
+2007-04-17 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * Membership.cs:
+       * Roles.cs:
+       if default provider was not found ConfigurationErrorsException is thrown.
+
+2007-04-12  Marek Habersack  <mhabersack@novell.com>
+
+       * RoleManagerModule.cs: do not try to decrypt encryption tickets
+       from cookies with empty values.
+
+2007-04-04 Juraj Skripsky <js@hotfeet.ch>
+
+       * FormsAuthenticationModule.cs: Move initialization of _config out
+       of Init() as app.Context is null in that method when a session is
+       about to be terminated.
+
+2007-03-21 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * AnonymousIdentificationModule.cs: optimized Config property
+
+2007-03-21 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * AnonymousIdentificationModule.cs: added configuration section caching
+       to AppDomain for TARGET_JVM
+       * RoleManagerModule.cs:
+       * UrlAuthorizationModule.cs:
+       * FormsAuthenticationModule.cs: refactored configuration section to be
+       a member of a class
+
+2007-03-20  Marek Habersack  <mhabersack@novell.com>
+
+       * FormsAuthentication.cs, Roles.cs: remove roles cookie on sign
+       out. Fixes bug #81195. Patch from Mike Morano <mmorano@mikeandwan.us>.
+
+2007-03-12  Marek Habersack  <mhabersack@novell.com>
+
+       * RolePrincipal.cs: decrypt the roles ticket properly. Makes role
+       caching in cookies work. Fixes bug #81117. Patch from Mike Morano
+       <mmorano@mikeandwan.us>
+
+2007-03-02  Marek Habersack  <mhabersack@novell.com>
+
+       * SqlMembershipProvider.cs: cast PasswordFormat to int, so that
+       the parameter code can infer the sql type. Makes user creation,
+       password reset etc. work.
+
+2007-02-28  Andreia Gaita  <avidigal@novell.com>
+
+       * SqlRoleProvider.cs: Fix parameter binding to stored procedures.
+       * SqlMembershipProvider.cs: Fix parameter binding to stored procedures.
+       CreateUser() doesn't use transactions in MS asp.net, so removed the 
+       transaction calls.
+
+2007-02-19 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * RoleManagerModule.cs: fixed role chaching in OnEndRequest and
+       OnPostAuthenticateRequest
+       * RolePrincipal.cs: implemented ToEncryptedTicket, implemented caching
+       role functionality
+       * Roles.cs: implemented DeleteCookie, fixed CookieProtectionValue to
+       get it's value from configuration
+
+2007-02-08  Marek Habersack  <grendello@gmail.com>
+
+       * FormsAuthenticationModule.cs: Expire auth tickets properly.
+
+       * MembershipProvider.cs: Do not clear the password before
+       encrypting it. 
+
+2007-01-20  Miguel de Icaza  <miguel@novell.com>
+
+       * SqlRoleProvider.cs: comment out unused code.
+
+       * SqlMembershipProvider.cs: Removed unused variables.
+       Remove unused variable.
+
+       * AnonymousIdentificationModule.cs (ClearAnonymousIdentifier):
+       remove unused variable.   This might be a real bug.
+
+2007-01-16 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * RoleManagerModule.cs: fixed OnPostAuthenticateRequest,
+       CacheRolesInCookie not supported yet
+       * Roles.cs: fixed DeleteCookie, CacheRolesInCookie not supported yet
+
+2007-01-11 Adar Wesley <adarw@mainsoft.com>
+
+       * MembershipProvider.cs: fixed EncryptPassword to use password buffer length
+
+2007-01-04 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * AnonymousIdentificationModule.cs: fixed OnEnter, fixed failure on
+       incorrect cookie value that browser may hold
+
+2006-12-27 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * FormsAuthentication.cs: added internal ReturnUrl property,
+       GetRedirectUrl added usage of ReturnUrl
+
+2006-12-12 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * FormsAuthentication.cs: TARGET_J2EE define for static members
+
+2006-12-06 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * FormsAuthenticationModule.cs: fixed OnAuthenticateRequest, suppress
+       exception on wrong ticket
+
+2006-12-03 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * FormsAuthenticationModule.cs: 
+       set SkipAuthorization=true for WebResource.axd
+
+2006-11-27 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * SqlMembershipProvider.cs: typo bug
+
+2006-11-21 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * SqlMembershipProvider.cs: fixed fixed exception type in GetPassword
+       checks user lockout
+
+2006-11-20 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * SqlMembershipProvider.cs: fixed: UpdateUser works properly.
+
+2006-11-15 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * SqlMembershipProvider.cs: fixed: name is used for ReturnValue parameter.
+
+2006-11-05 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * AnonymousIdentificationModule.cs: fixed anonymous id cookie
+
+2006-11-05 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * MembershipProvider.cs, SqlMembershipProvider.cs:
+       refactoring of DecryptPassword and EncryptPassword methods according
+       to documentation
+
+2006-09-10 Konstantin Triger <kostat@mainsoft.com>
+
+       * SqlRoleProvider.cs: throw on empty connection string.
+
+2006-09-26 Vladimir Krasnov <vladimirk@mainsoft.com>
+
+       * Membership.cs: fixed GetAllUsers, typo bug
+       * SqlRoleProvider.cs, SqlMembershipProvider.cs: refactored to use
+       aspnetdb built in stored procedures,
+       fixed application name and membership relation,
+       improved exception handling
+
+2006-09-03 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * RolePrincipal.cs: refactoring: instance can be serialized.
+
+2006-09-03 Igor Zelmanovich <igorz@mainsoft.com>
+
+       * SqlMembershipProvider.cs: fixed GetUser,
+       when username is String.Empty methods returns null.
+
 2006-08-31 Konstantin Triger <kostat@mainsoft.com>
 
        * SqlRoleProvider.cs: fixed initialization.