- Full support for ASP.NET Core
- Remove hardcoding of SHA256, can now use SHA256, SHA384 or SHA512
- Introduce ISignatureCache so we can have different NET/Core implementations
- Breaking change - ISignatureCalculator now takes optional scheme parameter
- Breaking change - HmacSigningHandler now takes optional scheme parameter
- Breaking change - HmacAuthenticator, constructor argument renamed
- Breaking change - HmacSignatureValidator, constructor now takes ISignatureCache rather than ICache
- Introduce SourceLink, update dependencies
- Tidy up package dependencies
- Target net462, net471 and net472
- Some support for netstandard20
- Update dependencies to latest, convert projects to VS2017 format
- Use ConfigurAwait(false) on MD5 hash methods
- Change signature validation errors from Debug to Info, easier production logging
- Introduce and prefer middleware using IDependencyResolver
- Introduced CachingSecretRepositorying using Meerkat.Caching
- Breaking change - changing namespaces to make it easier to filter on logging
- Change from Common.Logging to Meerkat.Logging, unifies logging framework across libraries.
- Fix DateTime.Kind problem by changing header date setting to DateTimeOffset.UtcNow.
- Handle content headers when converting IOwinRequest to HttpReuest, now log unhandled headers but don't error
- Improve error messages from Owin component, now same behaviour as HmacAuthorizeAttribute
- Introduced Owin middleware component, HmacAuthorizeAttribute is invoked too late to amend the claims using ClaimsTransformer in the Owin pipeline.
- Breaking change - Changed interface of IHmacAuthenticator to return ClaimsIdentity, simplifies Owin integration.
- Breaking change - Introduce SignatureValidator.ClockDrift property to to split cache duration from client/server clock drift.
- Change date format in message representation to RFC 1123, simplifies implementation for other languages as message date header is already in this format.
- Fix incorrect files in WebApi NuGet package
- Extend CustomHeadersRepresentation to handle multiple headers and also multiple values in a single header
- Utility function to help for Claims for from request headers
- Introduce Meerkat.Security.Hmac.WebApi with HmacAuthorizeAttribute to authorize WebApi controllers
- Introduce IRequestClaimsProvider to provide Claims once the signature has been validated
- Change to use signed version of Meerkat.Caching
- Change to using Meerkat.Caching
- Minor internal refactoring
- More inline documentation
- Remove test assembly from nuspec and add documentation file
- First release