1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
using System;
using System.Collections.Generic;
using System.Text;
using System.ServiceModel.Channels;
using System.ServiceModel;
using System.ServiceModel.Security.Tokens;
namespace System.ServiceModel.Dispatcher
{
internal class SecurityHandler : BaseRequestProcessorHandler
{
protected override bool ProcessRequest (MessageProcessingContext mrc)
{
DispatchRuntime dispatch_runtime = mrc.OperationContext.EndpointDispatcher.DispatchRuntime;
// FIXME: I doubt this should be done at this "handler"
// layer, especially considering about non-ServiceHost
// use of SecurityBindingElement + listener.
//
// For example there is no way to handle it in duplex
// dispatch callbacks.
if (dispatch_runtime.ChannelDispatcher == null)
return false;
Message negoResponce = null;
// process WS-Trust based negotiation
MessageSecurityBindingSupport support =
dispatch_runtime.ChannelDispatcher.Listener.GetProperty<MessageSecurityBindingSupport> ();
if (support != null && mrc.IncomingMessage.Headers.FindHeader ("Security", Constants.WssNamespace) < 0) {
CommunicationSecurityTokenAuthenticator nego =
support.TokenAuthenticator as CommunicationSecurityTokenAuthenticator;
if (nego != null)
negoResponce = nego.Communication.ProcessNegotiation (mrc.IncomingMessage);
}
if (negoResponce == null)
return false;
ReplyNegoResponse (mrc, negoResponce);
return true;
}
void ReplyNegoResponse (MessageProcessingContext mrc, Message negoResponse)
{
negoResponse.Headers.CopyHeadersFrom (mrc.OperationContext.OutgoingMessageHeaders);
negoResponse.Properties.CopyProperties (mrc.OperationContext.OutgoingMessageProperties);
mrc.RequestContext.Reply (negoResponse, mrc.Operation.Parent.ChannelDispatcher.timeouts.SendTimeout);
return;
}
}
}
|
