Comments (19)
The irony is that the owin community at the time opposed owin.dll
for this precise reason.
Now there will not likely be a netstandard version of owin.dll
thus freezing the entire chain of code that depends on it.
Sad.
from aspnetkatana.
But we're not going to support Katana on netstandard, we just don't have the man power to support it.
from aspnetkatana.
Unfortunately that breaking change would break every dependent library and prevent you from using any 3.x middleware with 4.x. There's a limit to the degree of breaking changes we're willing to inflict.
from aspnetkatana.
from aspnetkatana.
Ahhh @damianh. Always willing to blow things up. 😉
from aspnetkatana.
This would be a too breaking change which we don't plan to do.
from aspnetkatana.
Actually, updating the Owin.nupkg would be easier and far less breaking. However, you'd have to invoke the ghost of @lodejard as I think he was the one with the signing keys.
from aspnetkatana.
Owin.dll
is community owned IIRC. I would ping @panesofglass owin/owin.dll#25
from aspnetkatana.
Ok, I think an owin 1.0.1 package with a netstandard bin would be acceptable.
@Tratcher @lodejard, do either of you know who owns this profile https://www.nuget.org/profiles/owincontrib ? I contacted @panesofglass, @skoon and @serialseb and none of them know.
from aspnetkatana.
Any reason not to do a type redirect to an MS assembly and update the package with an empty one for legacy applications?
from aspnetkatana.
@serialseb interesting idea, but it would be hard to avoid a circular dependency in the process. You'd have to reverse the relationship between Owin and Microsoft.Owin, or introduce a 3rd package Microsoft.Owin.Abstractions.
@damianh I think Louis and I are part of https://www.nuget.org/profiles/owincontrib, as we originally uploaded the package.
from aspnetkatana.
I'm tempted to create a netstandard owin.dll just to unblock this. I just wish I understood why moving the interfaces into Microsoft.Owin is a no-go. I've never understood the argument, especially with a major version change. Also, if we brought it back, I think we should insist that the IAppBuilder
interface expose actual types to help contributors know what's allowed and what's not. I think that would be its own breaking change. (Not sure how I missed all these messages in the past.)
from aspnetkatana.
I can imagine that it would be doable to do the type redirect, but it may not be needed. If you make owin a meta package for Microsoft.Owin, and move the Owin.dll in that Microsoft package, I fail to see how that would be introducing any problem if a new version comes out, you jsut remove the Owin package from the package dependency and it'll eventually die of, and anything that was binding to the owin.dll in the owin package could now bind to owin.dll in Microsoft.Owin? It may prevent this from ever happening again or having to ever resuscitate the dead again? 🧟♀️🧟♂️
from aspnetkatana.
Also may want to @Tratcher as i don't think anyone gets notifications on closed stuff at MS
from aspnetkatana.
We have no plans to port katana to be netstandard. Owin.dll though, I actually have no idea what the deal is there... What's the end goal here?
from aspnetkatana.
I think owin/owin.dll#26
from aspnetkatana.
@davidfowl some of us still have web infrastructure written in OWIN we don't necessarily want to rewrite that depends on Katana, and we would like to update it to run on netstandard/netcore. Does that sum it up, @damianh and @serialseb?
from aspnetkatana.
only dep i have on IAppBuilder is for the katana integration package, so moving the dependency from one package to another or leaving the metapackage as is wouldn't bother me much, I never cared for that interface as you know.
from aspnetkatana.
That indeed sums it up @panesofglass
from aspnetkatana.
Related Issues (20)
- Unauthorized error 401.0 for Asp.net mvc site with IIS anonymous authentication HOT 8
- /signin-oidc is not found HOT 7
- 'OwinStartupAttribute' is inaccessible due to its protection level HOT 3
- GetExternalLoginInfoAsync() return null for facebook only HOT 6
- Having vulnerabilities on Microsoft.Owin.Security.OpenIdConnect, 4.2.2 HOT 2
- ClockSkew Ignored by OAuthBearerAuthenticationHandler HOT 2
- Requests are run on IOCP threads by default in OwinHttpListener HOT 5
- Attempt to access method System.Management.Instrumentation.InstrumentedAttribute..ctor(System.String) in violation of security transparency rules failed. HOT 2
- Question: Why does the 4.2.2 package specifically require .NET Framework 4.5? HOT 2
- System.NullReferenceException: Object reference not set to an instance of an object HOT 9
- App redirects to different Auth Type refresh token URL. HOT 4
- Strange behavior on port 50000 for Owin self hosting.... HOT 8
- OpenIdConnectProtocolValidator cannot validate state HOT 4
- Should OIDC middleware be refreshing a `code id_token` when close to expiry? HOT 3
- Session in ASP.NET WebForm is cleared after authenticated by Entra ID with CookieAuthentication and WsFederationAuthentication HOT 2
- Always a object reference error when trying to host a webapi in owin self hosted HOT 3
- owin.RequestId always empty guid string HOT 3
- Microsoft.Owin.Security.WsFederation has a vulnerable Newtonsoft.Json package dependency HOT 10
- how do you remove additional query parameters HOT 1
- Migrate to 1ES pipelines HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aspnetkatana.