1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
//------------------------------------------------------------------------------
// <copyright file="FormsIdentity.cs" company="Microsoft">
// Copyright (c) Microsoft Corporation. All rights reserved.
// </copyright>
//------------------------------------------------------------------------------
/*
* FormsIdentity
*
* Copyright (c) 1999 Microsoft Corporation
*/
namespace System.Web.Security {
using System.Collections.Generic;
using System.Runtime.InteropServices;
using System.Runtime.Serialization;
using System.Security;
using System.Security.Claims;
using System.Security.Permissions;
using System.Security.Principal;
/// <devdoc>
/// This class is an IIdentity derived class
/// used by FormsAuthenticationModule. It provides a way for an application to
/// access the cookie authentication ticket.
/// </devdoc>
[Serializable]
[ComVisible(false)]
public class FormsIdentity : ClaimsIdentity {
/// <devdoc>
/// The name of the identity (in this case, the
/// passport user name).
/// </devdoc>
public override String Name { get { return _Ticket.Name;}}
/// <devdoc>
/// The type of the identity (in this case,
/// "Forms").
/// </devdoc>
public override String AuthenticationType { get { return "Forms";}}
/// <devdoc>
/// Indicates whether or not authentication took
/// place.
/// </devdoc>
public override bool IsAuthenticated { get { return true;}}
private FormsAuthenticationTicket _Ticket;
/// <devdoc>
/// Returns the FormsAuthenticationTicket
/// associated with the current request.
/// </devdoc>
public FormsAuthenticationTicket Ticket { get { return _Ticket;}}
public override IEnumerable<Claim> Claims
{
get
{
return base.Claims;
}
}
/// <devdoc>
/// Constructor.
/// </devdoc>
public FormsIdentity (FormsAuthenticationTicket ticket) {
if (ticket == null)
throw new ArgumentNullException("ticket");
_Ticket = ticket;
AddNameClaim();
}
/// <devdoc>
/// Constructor.
/// </devdoc>
protected FormsIdentity(FormsIdentity identity)
: base((IIdentity)identity)
{
_Ticket = identity._Ticket;
}
/// <devdoc>
/// Returns a new instance of <see cref="FormsIdentity"/> with values copied from this object.
/// </devdoc>
public override ClaimsIdentity Clone()
{
return new FormsIdentity(this);
}
[OnDeserialized()]
private void OnDeserializedMethod(StreamingContext context)
{
// FormIdentities that have been deserialized from a .net 4.0 runtime, will not have any claims.
// In this case add a name claim, otherwise assume it was deserialized.
bool claimFound = false;
foreach (Claim c in base.Claims)
{
claimFound = true;
break;
}
if (!claimFound)
{
AddNameClaim();
}
}
[SecuritySafeCritical]
private void AddNameClaim()
{
if (_Ticket != null && _Ticket.Name != null)
{
base.AddClaim(new Claim(base.NameClaimType, _Ticket.Name, ClaimValueTypes.String, "Forms", "Forms", this));
}
}
}
}
|
