WCFE（含摘要）在WCF \ .Net \ C＃中 - 一種簡單的方法？

Question

免責聲明：淨N00B

我一直在打我的頭撞在牆上了幾天，現在試圖讓這個外部供應商的Web服務無濟於事保障工作。事實證明，他們使用WSSE消化的安全，這在短，增加了一些像這樣的SOAP頭：

<wsse:UsernameToken wsu:Id="Example-1"> 
    <wsse:Username> ... </wsse:Username> 
    <wsse:Password Type="..."> ... </wsse:Password> 
    <wsse:Nonce EncodingType="..."> ... </wsse:Nonce> 
    <wsu:Created> ... </wsu:Created> 
</wsse:UsernameToken> 

我開始通過添加服務引用，並通過很多很多的博客文章，計算器問題擺弄app.config和代碼。我似乎無法做到。也許這不容易嗎？也許我只是不知道Visual Studio 2010和.Net，我不確定。

這是我停在我的app.config：

<system.serviceModel> 
    <bindings> 
     <basicHttpBinding> 
      <binding name="ServiceHttpBinding" closeTimeout="00:01:00" 
       openTimeout="00:01:00" receiveTimeout="00:10:00" sendTimeout="00:01:00" 
       allowCookies="false" bypassProxyOnLocal="false" hostNameComparisonMode="StrongWildcard" 
       maxBufferSize="65536" maxBufferPoolSize="524288" maxReceivedMessageSize="65536" 
       messageEncoding="Text" textEncoding="utf-8" transferMode="Buffered" 
       useDefaultWebProxy="true"> 
       <readerQuotas maxDepth="32" maxStringContentLength="8192" maxArrayLength="16384" 
        maxBytesPerRead="4096" maxNameTableCharCount="16384" /> 
       <security mode="TransportWithMessageCredential" /> 
      </binding> 
     </basicHttpBinding> 
    </bindings> 
    <client> 
     <endpoint address="https://vendorurl" 
      binding="basicHttpBinding" bindingConfiguration="ServiceHttpBinding" 
      contract="ContractName" 
      name="ServiceHttpPort"> 
     </endpoint> 
    </client> 
</system.serviceModel> 

和C＃：

var someService = new ServiceClient(); 

    someService.ClientCredentials.UserName.UserName = "username"; 
    someService.ClientCredentials.UserName.Password = "passwordgobbletygook/somemorebase64stuff="; 

    #region Begin Magic 
    var elements = someService.Endpoint.Binding.CreateBindingElements(); 

    var securityBindingElement = elements.Find<SecurityBindingElement>(); 
    securityBindingElement.IncludeTimestamp = false; 

    someService.Endpoint.Binding = new CustomBinding(elements); 
    #endregion 

    var response = someService.webMethod(param1, param2, param3, param4); 

    Console.WriteLine(response); 

有趣的是，在廠商的Spec，我發現他們鼓勵使用WSSJ，所以我試了一下（在Java中）和我把它工作在2小時

這是什麼樣子：

public class Test implements CallbackHandler { 

    /** 
    * @param args 
    */ 
    public static void main(final String[] args) throws Throwable { 
     SomeService_Service someService_Service = new SomeService_Service(); 
     SomeService someService = someService_Service.getSomeServiceHttpPort(); 

     BindingProvider bindingProvider = (BindingProvider)someService; 
     Map< String, Object > requestContext = bindingProvider.getRequestContext(); 
     requestContext.put(BindingProvider.ENDPOINT_ADDRESS_PROPERTY, "https://vendorurl"); 

     Client client = ClientProxy.getClient(someService); 
     Endpoint endpoint = client.getEndpoint(); 

     Map< String, Object > outProps = new HashMap< String, Object >(); 
     outProps.put(WSHandlerConstants.ACTION, WSHandlerConstants.USERNAME_TOKEN); 
     outProps.put(WSHandlerConstants.USER, "username"); 
     outProps.put(WSHandlerConstants.PASSWORD_TYPE, WSConstants.PW_DIGEST); 
     outProps.put(WSHandlerConstants.PW_CALLBACK_REF, new Test()); 

     WSS4JOutInterceptor wssOut = new WSS4JOutInterceptor(outProps); 
     endpoint.getOutInterceptors().add(wssOut); 

     System.out.println(someService.webMethod(param1, param2, param3, param4)); 
    } 

    public void handle(final Callback[] callbacks) throws IOException, UnsupportedCallbackException { 
     WSPasswordCallback pc = (WSPasswordCallback)callbacks[ 0 ]; 

     // set the password for our message. 
     pc.setPassword("passwordgobbletygook/somemorebase64stuff="); 
    } 
} 

有沒有人在那裏在stackoverflow土地得到了這個工作在.Net \ C＃？有什麼明顯的我在這裏失蹤？

Answer 1

在嘗試將基於.NET的組件連接到基於JAVA的SOAP服務時，我們遇到了此問題。我們的解決方案不涉及任何XML構造，並且恕我直言，比我見過的其他任何東西都要乾淨利索。

缺點是您需要下載幷包含一個較舊的可選.NET DLL才能使其工作。好處是代碼非常乾淨，並且自然適合WCF。

基本實現看起來是這樣的：

using (OperationContextScope scope = new OperationContextScope(client.InnerChannel)) 
{ 
    //Class from WSE 3.0 
    UsernameToken token = new UsernameToken("MY_USERNAME", "MY_PASSWORD", PasswordOption.SendHashed); 

    //Add Auth to SOAP Header 
    MessageHeader header 
     = MessageHeader.CreateHeader(
     "Security", 
     "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd", 
     token.GetXml(new XmlDocument()) 
    ); 

    OperationContext.Current.OutgoingMessageHeaders.Add(header); 

    //Build Request 
    OrgWS.OrganizationDetailsRequest request = new OrgWS.OrganizationDetailsRequest() 
    { 
     ID = 1 
    }; 

    //Send Request 
    OrgWS.OrganizationDetail[] response = client.getOrganizationDetail(request); 

    //Do something with response 
} 

一個完整的解釋可以在這裏找到：http://cxdeveloper.com/article/implementing-ws-security-digest-password-nonce-net-40-wcf