Databases
StackOverflow2013
Postsdbo
POManipulating WCF header details
Body
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POManipulating WCF header details
    text
    copied!<p>I am building a client to some STS service and for more than one day now I am trying to add a Header to a WCF message. In my call to RequestSecurityToken I have to include a UsernameToken.</p> <p>I'm not sure how to accomplish that. For the moment I defined an endpoint behavior and a message inspector (took me long enough to discover those...). In the BeforeSendRequest() of the latter I create an object of the custom class 'Security' which derives from MessageHeader. Security includes an instance of UsernameToken.</p> <pre><code>public class MessageInspector : IClientMessageInspector { public object BeforeSendRequest(ref Message request, IClientChannel channel) { Security uns = new Security(); uns.UsernameToken = new UsernameToken(); // ... var Header = new MessageHeader&lt;Security&gt;(uns); var untyped = Header.GetUntypedHeader("Security", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"); request.Headers.Add(untyped); return null; } } public class Security : MessageHeader { public UsernameToken UsernameToken = new UsernameToken(); public override string Name { get { return "Security"; } } public override string Namespace { get { return "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"; } } } public class UsernameToken { public String Username = ""; public Password Password = new Password(); } </code></pre> <p>This is what is being serialised</p> <pre><code>&lt;s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"&gt; &lt;s:Header&gt; &lt;Action s:mustUnderstand="1" xmlns="http://schemas.microsoft.com/ws/2005/05/addressing/none"&gt;urn:RequestSecurityToken&lt;/Action&gt; &lt;Security xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"&gt; &lt;UsernameToken xmlns="http://schemas.datacontract.org/2004/07/Tarifrechner.Kfz"&gt; &lt;Password&gt; &lt;Type&gt;http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText&lt;/Type&gt; &lt;password&gt;******&lt;/password&gt; &lt;/Password&gt; &lt;Username&gt;******&lt;/Username&gt; &lt;/UsernameToken&gt; &lt;/Security&gt; &lt;/s:Header&gt; &lt;s:Body /&gt; &lt;/s:Envelope&gt; </code></pre> <p>Especially the namespace of UsernameToken seems to be wrong. I know it comes from the data contract serialization but i need a different namespace.</p> <p>This is what I would like the serialised data to look like</p> <pre><code>&lt;?xml version="1.0" encoding="utf-8"?&gt; &lt;soap:Envelope xmlns:soap="..."&gt; &lt;soap:Header&gt; &lt;Security xmlns:q1="http://www.bipro.net/namespace" xsi:type="q1:UserNameSecurity" xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"&gt; &lt;UsernameToken&gt; &lt;Username&gt;******&lt;/Username&gt; &lt;Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText"&gt;******&lt;/Password&gt; &lt;/UsernameToken&gt; &lt;/Security&gt; &lt;wsa:Action&gt;urn:RequestSecurityToken&lt;/wsa:Action&gt; &lt;wsse:Security&gt; &lt;wsu:Timestamp wsu:Id="Timestamp-b9dd599d-5901-451d-8321-6a309091f273"&gt; &lt;wsu:Created&gt;2012-03-11T16:02:56Z&lt;/wsu:Created&gt; &lt;wsu:Expires&gt;2012-03-11T16:07:56Z&lt;/wsu:Expires&gt; &lt;/wsu:Timestamp&gt; &lt;/wsse:Security&gt; &lt;/soap:Header&gt; &lt;soap:Body&gt; &lt;RequestSecurityToken xmlns="http://schemas.xmlsoap.org/ws/2005/02/trust"&gt; &lt;TokenType&gt;http://schemas.xmlsoap.org/ws/2005/02/sc/sct&lt;/TokenType&gt; &lt;RequestType&gt; http://schemas.xmlsoap.org/ws/2005/02/trust/Issue &lt;/RequestType&gt; &lt;/RequestSecurityToken&gt; &lt;/soap:Body&gt; &lt;/soap:Envelope&gt; </code></pre> <p>Is my approach about right? And how can I manipulate things like the namespace of a header detail or whether data is being serialised as attribute or element?</p> <p><strong>Update</strong></p> <hr> <p>As Ladislav already noted, I don't have to implement classes like UsernameToken myself. I did that only because my knowledge of WCF is so limited.</p> <p>By now, I discovered, that WS2007HttpBinding, configured to use SecurityMode.TransportWithMessageCredential and with EstablishSecurityContext set to false produces almost the XML I am looking for. How should I have known that?</p> <p>But there's one problem left: My request has an empty body element, where the request I want to produce, features a RequestSecurityToken element inside the body element. Does anyone know, how I can achieve that?</p> <p>Using EstablishSecurityContext = true helps but at the same time changes my Soap-Action from the desired "urn:RequestSecurityToken" into the non-working "http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/SCT".</p> <hr> <p>I appreciate any answer!</p> <p>Thanks a lot!</p> <p>Björn</p>
 

Querying!

 
Guidance
An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload