/token endpoint should not be enabled by default

I have a WebAPI 2 project that inexplicably implements the /token OAuth endpoint, despite there being no obvious code or configuration telling it to do so. I discovered this hidden surface area by ...

Id #2260 | Release: None | Updated: Today at 3:19 AM by bobmeyers | Created: Fri at 11:31 PM by bobmeyers

unhandled exception in parsing incorrect multipart request

Hi, we are trying to send an incorrect multipart response to our WebAPI service, and we are getting a 500 response with the following stack trace from inside the framework. As a workaround I star...

Id #2259 | Release: None | Updated: Wed at 12:29 AM by mospehraict | Created: Wed at 12:29 AM by mospehraict

Json.Net TypeNameHandling.Auto is not correctly handled by BaseJsonMediaTypeFormatter

Hi, I'm facing a problem with my ApiController returning complex objects (with inheritance) in JSON (Json.Net) with TypeNameHandling set to "Auto" in Json.Net serializer settings (http://www.newt...

Id #2258 | Release: None | Updated: May 20 at 7:04 AM by ijardillier | Created: May 19 at 12:36 PM by ljcegi

Logical CallContext does not flow from async filter to action

I've observed an issue where any logical CallContext data set in an async action filter does not flow through to the controller action. For example, suppose a filter sets the value "set-by-filter...

Id #2257 | Release: None | Updated: May 19 at 6:46 PM by joelverhagen | Created: May 15 at 7:46 PM by joelverhagen

Html.TextBoxFor and HTML5 number input control decimal separator problem

Some info Number input control is a new HTML5 input type and is simply defined as <input type="number">. Its value attribute is a string that represents a floating-point number and according to t...

Id #2256 | Release: None | Updated: Apr 27 at 12:28 AM by zerhan | Created: Apr 27 at 12:28 AM by zerhan

Issue with JsonSerializerSettings used by ApiController.Json<T>(T Content)

Hi, I'm using MVC 5.2.3 and tried to configure GlobalConfiguration.Configuration.Formatters.JsonFormatter.SerializerSettings. E.g config.Formatters.JsonFormatter.SerializerSettings.Converters.Ad...

Id #2255 | Release: None | Updated: May 15 at 9:46 AM by dcumbo | Created: Apr 26 at 8:52 AM by minhkhoa4783

Use of PBKDF2 in Crypto.HashPassword

You are using PBKDF2 incorrectly: "PBKDF2 with HMAC-SHA1, 128-bit salt, 256-bit subkey, 1000 iterations". You are doing twice the work with no extra benefit. When you use PBKDF2 for password hashin...

Id #2254 | Release: None | Updated: Apr 24 at 11:05 AM by Sc00bz | Created: Apr 24 at 11:05 AM by Sc00bz

Bug in System.Web.Http.ModelBinding.FormDataCollectionExtensions.cs

In System.Web.Http.ModelBinding.FormDataCollectionExtensions.cs Line 58, is as follows: throw Error.Argument("key", SRResources.JQuerySyntaxMissingClosingBracket); this causes the error messa...

Id #2253 | Release: None | Updated: Apr 20 at 9:06 PM by chrisherring | Created: Apr 20 at 9:06 PM by chrisherring

Provide some way to redirect page from MVC method which are passing JsonResult.

Hello, Please allow to redirect methods that are returning JsonResult and even though want to redirect to some error page from that action. May be authentication failure or some other errors. ...

Id #2252 | Release: None | Updated: Apr 17 at 10:06 AM by komaldparekh | Created: Apr 17 at 10:06 AM by komaldparekh

TwoFactorSignInAsync Bug

The code below works fine... Except the fact that when the user has remember this browser checked it doesn't actually do it? OR sometimes it does it then when the user logs in its ok... but when a ...

Id #2250 | Release: None | Updated: Apr 2 at 9:14 PM by daw451 | Created: Apr 2 at 9:14 PM by daw451