public object TokenExchangeAfterAuthentication(string username, string password, string token)
{
var response = new OAuthAuthenticateResponse();
// TODO surround with try/catch and present 403 or 400 if token is unknown/invalid
var request_token = Rainy.RainyStandaloneServer.OAuth.RequestTokens.GetToken(token);
// the verifier is important, it is proof that the user successfully authorized
// the verifier is later tested by the OAuth10aInspector to macht
request_token.Verifier = Guid.NewGuid().ToString();
request_token.AccessDenied = false;
request_token.AccessToken = new AccessToken()
{
ConsumerKey = request_token.ConsumerKey,
Realm = request_token.Realm,
Token = Guid.NewGuid().ToString(),
TokenSecret = Guid.NewGuid().ToString(),
UserName = username,
ExpiryDate = DateTime.Now.AddYears(99)
};
RainyStandaloneServer.OAuth.RequestTokens.SaveToken(request_token);
Logger.DebugFormat("created an access token for user {0}: {1}", username, token);
// redirect to the provded callback
var redirect_url = request_token.CallbackUrl + "?oauth_verifier=" + request_token.Verifier
+ "&oauth_token=" + request_token.Token;
response.RedirectUrl = redirect_url;
// the browser/gateway page should take the RedirectUrl and access it
// note that the redirect url points to a tomboy listener, or tomdroid listener (tomdroid://...)
return(response);
}
public object TokenExchangeAfterAuthentication(string username, string password, string token)
{
var response = new OAuthAuthenticateResponse();
var rng = new RNGCryptoServiceProvider();
// TODO surround with try/catch and present 403 or 400 if token is unknown/invalid
var request_token = oauthHandler.RequestTokens.GetToken(token);
// the verifier is important, it is proof that the user successfully authorized
// the verifier is later tested by the OAuth10aInspector to macht
request_token.Verifier = rng.Create256BitLowerCaseHexKey();
request_token.AccessDenied = false;
var access_token = GenerateAccessToken(username, password);
request_token.AccessToken = access_token;
oauthHandler.RequestTokens.SaveToken(request_token);
Logger.DebugFormat("created an access token for user {0}: {1}", username, token);
// redirect to the provded callback
var redirect_url = request_token.CallbackUrl + "?oauth_verifier=" + request_token.Verifier
+ "&oauth_token=" + request_token.Token;
response.RedirectUrl = redirect_url;
// the browser/gateway page should take the RedirectUrl and access it
// note that the redirect url points to a tomboy listener, or tomdroid listener (tomdroid://...)
return(response);
}
