Security stamp is not updated in the database by UserManager

Hi, I have written the following code to update the user's security stamp value to the database after signout. But It is not updated in the database and see the old value. Did I miss anything o...

Id #461 | Release: None | Updated: Fri at 6:46 PM by Tratcher | Created: Wed at 9:20 AM by dpmragu

SystemClock implementation is not monotonic

The current SystemClock implementation has an observable discrepancy where a later call to SystemClock.UtcNow produces an earlier timestamp. The current implementation: // the clock measures whole...

Id #460 | Release: None | Updated: Jun 9 at 9:54 PM by Tratcher | Created: Jun 8 at 10:35 AM by BachratyGergely

StaticFiles: max file size on range request

In the Microsoft.Owin.StaticFiles library, there is a bug that causes it to not respect range request headers for files larger than ~2GB. See RangeHelpers::TryParseLong method. It's supposed to b...

Id #459 | Release: None | Updated: Jun 2 at 6:39 PM by Tratcher | Created: Jun 2 at 2:55 PM by brazen

The state field is missing or invalid. ?

I've enabled Owin logging in 3.0.1 for our MVC website. However noticed this is turning up in the log for every user? WARN Microsoft.Owin.Security.OpenIdConnect.OpenIdConnectAuthenticationMi...

Id #458 | Release: None | Updated: May 9 at 6:15 AM by micatiosoftware | Created: May 8 at 11:06 PM by micatiosoftware

EmbeddedResourceFileSystem fails to return files under folders with dashes in name

There are several web libraries with dashes in their name like d3-tip, es6-shim, font-awesome. When embedding these in an assembly and using the EmbeddedResourceFileSystem, the folder names are no...

Id #457 | Release: None | Updated: May 2 at 6:30 AM by jonstelly | Created: May 2 at 6:28 AM by jonstelly

MicrosoftAcount context properties set after OnAuthenticated

In MicrosoftAccountAuthenticationHandler.cs (ca. line 125) in AuthenticateCoreAsync, the context properties are assigned after the callback to (On)Authenticated, which is inconsistent with other pr...

Id #454 | Release: None | Updated: Apr 11 at 3:05 PM by Tratcher | Created: Apr 11 at 1:56 PM by sierratu

Found a typos

Class: Microsoft.Owin.Logging.LoggerFactory Property: Default /// <summary> /// Provides a default ILoggerFactory based on System.Diagnostics.TraceSorce. /// </summary> public static ILoggerFactor...

Id #452 | Release: None | Updated: Mar 29 at 9:23 AM by tobyee | Created: Mar 29 at 9:23 AM by tobyee

Facebook/Google auth: Allow customizable fields

Background 1) After acquiring an OAuth access token, the external authentication middlewares make API/graph requests to the appropriate provider to retrieve identity-related information about the ...

Id #451 | Release: None | Updated: Mar 15 at 2:32 PM by Tratcher | Created: Mar 15 at 10:18 AM by MattCole_LiveHire

Facebook auth: UserInfoEndpoint should be formattable

Background The Facebook authentication middleware can be configured to customize the user information endpoint. Presumably, the intent is to allow consumers to patch to react to breaking Facebook ...

Id #450 | Release: None | Updated: Mar 15 at 2:30 PM by Tratcher | Created: Mar 15 at 9:48 AM by MattCole_LiveHire

OWIN openid connect support for response_mode query

We were able to get opened connect implicit grant type working with IDPs which support response mode “form_post”. But we can’t get it working with IDPs which supports only “query” response mode. ...

Id #449 | Release: None | Updated: Mar 14 at 5:16 PM by Tratcher | Created: Mar 11 at 10:03 AM by hasinthaindrajee