ASP.NET MVC 3 - DotNetOpenAuth - System.Security.SecurityException

Question

I am trying to set up a simple website which uses DotNetOpenAuth as its membership provider. Everything was going great until I ran into the following exception.

[SecurityException: Request for the permission of type 'System.Net.WebPermission, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.]
    System.Security.CodeAccessSecurityEngine.Check(Object demand, StackCrawlMark& stackMark, Boolean isPermSet) +0
    System.Security.CodeAccessSecurityEngine.Check(CodeAccessPermission cap, StackCrawlMark& stackMark) +31
    System.Security.CodeAccessPermission.Demand() +46
    System.Net.Configuration.DefaultProxySection.PostDeserialize() +103

The code is below. Unfortunately I cannot reproduce the problem on my local machine. This is being hosted on GoDaddy shared hosting. The line which causes the exception is openid.CreateRequest(id):

public virtual ActionResult Authenticate(OpenIdAuthenticationViewModel model, string returnUrl)
{
    OpenIdRelyingParty openid = new OpenIdRelyingParty();
    var response = openid.GetResponse();

    if (response == null)
    {
        Identifier id;
        if (Identifier.TryParse(model.OpenIdUrl, out id))
        {
            try
            {
                var openIdRequest = openid.CreateRequest(id);
                var result = openIdRequest.RedirectingResponse.AsActionResult();
                return result;
            }
            catch (ProtocolException pe)
            {
                ViewData["OpenIdMessage"] = pe.Message;
                return View(model);
            }
        }
        else
        {
            ViewData["OpenIdMessage"] = "Invalid Identifier";
            return View(model);
        }
    }

    // code that handles response
}

I've tried changing the requirePermission attribute of

<section name="dotNetOpenAuth" type="DotNetOpenAuth.Configuration.DotNetOpenAuthSection" requirePermission="false" allowLocation="true" />

but that only caused a different root for the exception stack trace. There is very little information to be found on this exact exception on the web.

Andrew Arnott · Accepted Answer · 2011-03-01 15:28:17Z

1

This looks like it's because you've got a web.config with the following snippet:

<system.net>
    <defaultProxy enabled="true" />
</system.net>

Try removing the <defaultProxy> tag, which shouldn't be necessary on GoDaddy anyway.

edited Mar 1, 2011 at 15:28

answered Mar 1, 2011 at 3:35

Andrew Arnott

82.1k28 gold badges140 silver badges181 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Nick Larsen Over a year ago

I got the package from nuget, and from the package description it is version 3.4.6.10357. I can give you any other information you would like.

Andrew Arnott Over a year ago

Great. I misread the error message in your question anyway. I've updated my answer.

Collectives™ on Stack Overflow

ASP.NET MVC 3 - DotNetOpenAuth - System.Security.SecurityException

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related