Cuemon.AspNetCore.Authentication 8.3.0

• net6.0

  • Cuemon.AspNetCore (>= 8.3.0)
  • Cuemon.Net (>= 8.3.0)
  • Cuemon.Security.Cryptography (>= 8.3.0)

• net7.0

  • Cuemon.AspNetCore (>= 8.3.0)
  • Cuemon.Net (>= 8.3.0)
  • Cuemon.Security.Cryptography (>= 8.3.0)

• net8.0

  • Cuemon.AspNetCore (>= 8.3.0)
  • Cuemon.Net (>= 8.3.0)
  • Cuemon.Security.Cryptography (>= 8.3.0)

Version 8.2.0
Availability: .NET 8, .NET 7 and .NET 6
 
# ALM
- CHANGED Dependencies to latest and greatest with respect to TFMs
 
# New Features
- ADDED AuthenticationHandlerFeature class in the Cuemon.AspNetCore.Authentication namespace that provides a combined default implementation of IAuthenticateResultFeature and IHttpAuthenticationFeature so that AuthenticateResult and User is consistent with each other
 
# Improvements
- CHANGED BasicAuthenticationHandler class in the Cuemon.AspNetCore.Authentication.Basic namespace to propagate IAuthenticateResultFeature and IHttpAuthenticationFeature as part of HandleChallengeAsync
- CHANGED DigestAuthenticationHandler class in the Cuemon.AspNetCore.Authentication.Digest namespace to propagate IAuthenticateResultFeature and IHttpAuthenticationFeature as part of HandleChallengeAsync
- CHANGED HmacAuthenticationHandler class in the Cuemon.AspNetCore.Authentication.Hmac namespace to propagate IAuthenticateResultFeature and IHttpAuthenticationFeature as part of HandleChallengeAsync
 
Version: 8.1.0
Availability: .NET 8, .NET 7 and .NET 6
 
# ALM
- CHANGED Dependencies to latest and greatest with respect to TFMs
 
# Breaking Changes
- CHANGED TryAuthenticate{T} signature on the static Authenticator class in the Cuemon.AspNetCore.Authentication namespace to honor the otherwise suggested Try-Parse pattern (although breaking the method was assessed to have low risk of external callers)
- CHANGED Authenticate{T} signature on the static Authenticator class in the Cuemon.AspNetCore.Authentication namespace to return a ClaimsPrincipal (wrapped inside a ConditionalValue) instead of assigning this directly to the User of the HttpContext instance (although breaking the method was assessed to have low risk of external callers)
 
# New Features
- ADDED BasicAuthenticationHandler class in the Cuemon.AspNetCore.Authentication.Basic namespace to provide a HTTP Basic Authentication implementation of AuthenticationHandler{TOptions}
- ADDED DigestAuthenticationHandler class in the Cuemon.AspNetCore.Authentication.Digest namespace to provide a HTTP Digest Access Authentication implementation of AuthenticationHandler{TOptions}
- ADDED HmacAuthenticationHandler class in the Cuemon.AspNetCore.Authentication.Hmac namespace to provide a HTTP HMAC Authentication implementation of AuthenticationHandler{TOptions}
 
# Improvements
- CHANGED BasicAuthenticationMiddleware class in the Cuemon.AspNetCore.Authentication.Basic namespace to be slightly more reusable in the confines of the Cuemon.AspNetCore.Authentication assembly
- CHANGED BasicAuthenticationOptions class in the Cuemon.AspNetCore.Authentication.Basic namespace to include ValidateOptions to ensure that public read-write properties are in a valid state
- CHANGED AuthenticationOptions class in the Cuemon.AspNetCore.Authentication namespace to inherit from AuthenticationSchemeOptions and implement IValidatableParameterObject (replacing earlier IParameterObject) that ensures UnauthorizedMessage property is in a valid state
- CHANGED DigestAuthenticationMiddleware class in the Cuemon.AspNetCore.Authentication.Digest namespace to be slightly more reusable in the confines of the Cuemon.AspNetCore.Authentication assembly
- CHANGED DigestAuthenticationOptions class in the Cuemon.AspNetCore.Authentication.Digest namespace to include ValidateOptions to ensure that public read-write properties are in a valid state
- CHANGED DigestAuthorizationHeaderBuilder class in the Cuemon.AspNetCore.Authentication.Digest namespace to include an extra overload of AddFromWwwAuthenticateHeader that accepts an instance of HttpResponseHeaders
- CHANGED HmacAuthenticationMiddleware class in the Cuemon.AspNetCore.Authentication.Hmac namespace to be slightly more reusable in the confines of the Cuemon.AspNetCore.Authentication assembly
- CHANGED HmacAuthenticationOptions class in the Cuemon.AspNetCore.Authentication.Hmac namespace to include ValidateOptions to ensure that public read-write properties are in a valid state
- CHANGED HmacAuthorizationHeaderBuilder class in the Cuemon.AspNetCore.Authentication.Digest namespace to include an extra overload of AddFromRequest that accepts an instance of HttpRequestMessage
 
# Bug Fixes
- FIXED DigestAuthenticationOptions class in the Cuemon.AspNetCore.Authentication.Digest namespace to include UseServerSideHa1Storage that finally allows the server to bypass calculation of HA1 password representation
 
Version: 8.0.1
Availability: .NET 8, .NET 7 and .NET 6
 
# ALM
- CHANGED Dependencies to latest and greatest with respect to TFMs
 
Version: 8.0.0
Availability: .NET 8, .NET 7 and .NET 6
 
# ALM
- ADDED TFM for net8.0
- REMOVED TFM for netstandard2.0
- CHANGED Dependencies to latest and greatest with respect to TFMs
 
# Quality Analysis Actions
- CHANGED HmacAuthorizationHeader class in the Cuemon.AspNetCore.Authentication.Hmac namespace to be compliant with https://learn.microsoft.com/en-us/dotnet/fundamentals/code-analysis/quality-rules/ca1860
- CHANGED BasicAuthenticationMiddleware class in the Cuemon.AspNetCore.Authentication.Basic namespace to be compliant with https://rules.sonarsource.com/csharp/RSPEC-6618/
- CHANGED DigestAuthenticationMiddleware class in the Cuemon.AspNetCore.Authentication.Digest namespace to be compliant with https://rules.sonarsource.com/csharp/RSPEC-6618/
- CHANGED DigestAuthorizationHeaderBuilder class in the Cuemon.AspNetCore.Authentication.Digest namespace to be compliant with https://rules.sonarsource.com/csharp/RSPEC-6618/
- CHANGED HmacAuthenticationMiddleware class in the Cuemon.AspNetCore.Authentication.Hmac namespace to be compliant with https://rules.sonarsource.com/csharp/RSPEC-6618/