1+ <configuration>
2+ <configSections>
3+ <section name="uri" type="System.Configuration.UriSection, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
4+ <sectionGroup name="dotNetOpenAuth" type="DotNetOpenAuth.Configuration.DotNetOpenAuthSection, DotNetOpenAuth">
5+ <section name="openid" type="DotNetOpenAuth.Configuration.OpenIdElement, DotNetOpenAuth" requirePermission="false" allowLocation="true" />
6+ <section name="oauth" type="DotNetOpenAuth.Configuration.OAuthElement, DotNetOpenAuth" requirePermission="false" allowLocation="true" />
7+ <section name="messaging" type="DotNetOpenAuth.Configuration.MessagingElement, DotNetOpenAuth" requirePermission="false" allowLocation="true" />
8+ <section name="reporting" type="DotNetOpenAuth.Configuration.ReportingElement, DotNetOpenAuth" requirePermission="false" allowLocation="true" />
9+ </sectionGroup>
10+ </configSections>
11+
12+ <uri>
13+ <!-- The uri section is necessary to turn on .NET 3.5 support for IDN (international domain names),
14+ which is necessary for OpenID urls with unicode characters in the domain/host name.
15+ It is also required to put the Uri class into RFC 3986 escaping mode, which OpenID and OAuth require. -->
16+ <idn enabled="All"/>
17+ <iriParsing enabled="true"/>
18+ </uri>
19+
20+ <system.net>
21+ <defaultProxy enabled="true" />
22+ <settings>
23+ <!-- This setting causes .NET to check certificate revocation lists (CRL)
24+ before trusting HTTPS certificates. But this setting tends to not
25+ be allowed in shared hosting environments. -->
26+ <!--<servicePointManager checkCertificateRevocationList="true"/>-->
27+ </settings>
28+ </system.net>
29+
30+ <runtime>
31+ <!-- This prevents the Windows Event Log from frequently logging that HMAC1 is being used (when the other party needs it). -->
32+ <legacyHMACWarning enabled="0" />
33+
34+ <!-- When targeting ASP.NET MVC 3, this assemblyBinding makes MVC 1 and 2 references relink
35+ to MVC 3 so libraries such as DotNetOpenAuth that compile against MVC 1 will work with it.
36+ <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
37+ <dependentAssembly>
38+ <assemblyIdentity name="System.Web.Mvc" publicKeyToken="31bf3856ad364e35" />
39+ <bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0" />
40+ </dependentAssembly>
41+ </assemblyBinding>
42+ -->
43+ </runtime>
44+
45+ <dotNetOpenAuth>
46+ <!-- This is an optional configuration section where aspects of dotnetopenauth can be customized. -->
47+ <!-- For a complete set of configuration options see http://www.dotnetopenauth.net/developers/code-snippets/configuration-options/ -->
48+ <openid>
49+ <relyingParty>
50+ <security requireSsl="false">
51+ <!-- Uncomment the trustedProviders tag if your relying party should only accept positive assertions from a closed set of OpenID Providers. -->
52+ <!--<trustedProviders rejectAssertionsFromUntrustedProviders="true">
53+ <add endpoint="https://www.google.com/accounts/o8/ud" />
54+ </trustedProviders>-->
55+ </security>
56+ <behaviors>
57+ <!-- The following OPTIONAL behavior allows RPs to use SREG only, but be compatible
58+ with OPs that use Attribute Exchange (in various formats). -->
59+ <add type="DotNetOpenAuth.OpenId.RelyingParty.Behaviors.AXFetchAsSregTransform, DotNetOpenAuth" />
60+ </behaviors>
61+ </relyingParty>
62+ </openid>
63+ <messaging>
64+ <untrustedWebRequest>
65+ <whitelistHosts>
66+ <!-- Uncomment to enable communication with localhost (should generally not activate in production!) -->
67+ <!--<add name="localhost" />-->
68+ </whitelistHosts>
69+ </untrustedWebRequest>
70+ </messaging>
71+ <!-- Allow DotNetOpenAuth to publish usage statistics to library authors to improve the library. -->
72+ <reporting enabled="true" />
73+ </dotNetOpenAuth>
74+ </configuration>
0 commit comments