BrentSchmaltz

DsigSerializer should not allow duplicate transforms.

1

Currently a user could add multiple of the same transform in a single reference. There should be only one type of Canonical algorithm (with or without comments). All other transforms...

Write tests to verify that 'inclusivePrefix' is working correctly.

2

It's not clear that we are handling this correctly. The EnvelopedSignatureReaders and Writers have been modified to handle multiple signatures. We need to make sure this is working correctly now...

The following test use static jwts as base64urlencoded strings and are used to compare jwts generated dynamically. Any changes to the order of the artifacts used to create the jwts...

This change solves a couple of issues. 1. A race condition where a SignatureProvider was disposed but was still able to be obtained from the cache. 2. SignatureProviders were not...

Change virtuals in abstract classes to abstract.

1

We added methods to an abstract class in a minor release and needed to mark them virtual and throw NotImplementedException. We should take the breaking compile change in the 8.x...

https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/c24bfe683427dbad566fe617d0d590ec3a61d8aa/src/Microsoft.IdentityModel.Tokens/BaseConfigurationManager.cs#L90 Was stubbed with a virtual instead of abstract as the method was added during a minor relase. This method must be defined for BaseConfigurationManager to do anything valuable. Make...