1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119
|
//
// System.Web.Security.AnonymousIdentificationModule
//
// Authors:
// Ben Maurer (bmaurer@users.sourceforge.net)
// Chris Toshok (toshok@ximian.com)
//
// (C) 2003 Ben Maurer
// Copyright (c) 2005 Novell, Inc (http://www.novell.com)
//
// Permission is hereby granted, free of charge, to any person obtaining
// a copy of this software and associated documentation files (the
// "Software"), to deal in the Software without restriction, including
// without limitation the rights to use, copy, modify, merge, publish,
// distribute, sublicense, and/or sell copies of the Software, and to
// permit persons to whom the Software is furnished to do so, subject to
// the following conditions:
//
// The above copyright notice and this permission notice shall be
// included in all copies or substantial portions of the Software.
//
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
// NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
// LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
// OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
// WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
//
using System;
using System.ComponentModel;
using System.Web;
using System.Web.Configuration;
using System.Text;
namespace System.Web.Security {
public sealed class AnonymousIdentificationModule : IHttpModule {
static readonly object creatingEvent = new object ();
HttpApplication app;
EventHandlerList events = new EventHandlerList ();
public event AnonymousIdentificationEventHandler Creating {
add { events.AddHandler (creatingEvent, value); }
remove { events.RemoveHandler (creatingEvent, value); }
}
public static void ClearAnonymousIdentifier ()
{
if (Config == null || !Config.Enabled)
/* XXX The user for the current request is anonymous */
throw new NotSupportedException ();
}
public void Dispose ()
{
app.PostAuthenticateRequest -= OnEnter;
app = null;
}
public void Init (HttpApplication app)
{
this.app = app;
app.PostAuthenticateRequest += OnEnter;
}
[MonoTODO ("cookieless userid")]
void OnEnter (object source, EventArgs eventArgs)
{
if (!Enabled)
return;
string anonymousID = null;
HttpCookie cookie = app.Request.Cookies [Config.CookieName];
if (cookie != null && (cookie.Expires == DateTime.MinValue || cookie.Expires > DateTime.Now)) {
try {
anonymousID = Encoding.Unicode.GetString (Convert.FromBase64String (cookie.Value));
}
catch { }
}
if (anonymousID == null) {
AnonymousIdentificationEventHandler eh = events [creatingEvent] as AnonymousIdentificationEventHandler;
if (eh != null) {
AnonymousIdentificationEventArgs e = new AnonymousIdentificationEventArgs (HttpContext.Current);
eh (this, e);
anonymousID = e.AnonymousID;
}
if (anonymousID == null)
anonymousID = Guid.NewGuid ().ToString ();
HttpCookie newCookie = new HttpCookie (Config.CookieName);
newCookie.Path = app.Request.ApplicationPath;
newCookie.Expires = DateTime.Now + Config.CookieTimeout;
newCookie.Value = Convert.ToBase64String (Encoding.Unicode.GetBytes (anonymousID));
app.Response.AppendCookie (newCookie);
}
app.Request.AnonymousID = anonymousID;
}
public static bool Enabled {
get {
if (Config == null)
return false;
return Config.Enabled;
}
}
static AnonymousIdentificationSection Config = (AnonymousIdentificationSection) WebConfigurationManager.GetSection ("system.web/anonymousIdentification");
}
}
|