WCF 身份验证 通过检查客户端IP

WCF 身份验证

功能描述:

服务运行的时候，通过配置文件获取所有可访问SOA端的服务IP。每次客户调用服务时获取IP对比判定通过。

以下是获取客户端IP的代码:

 /*************************************************************************************
 * 代码:吴蒋
 * 时间:2012.02.07
 * 说明:安全类
 * 其他:
 * 修改人：
 * 修改时间：
 * 修改说明：
 ************************************************************************************/
using System.ServiceModel;
using System.ServiceModel.Channels;

namespace Tools
{
    public class Safe
    {
        public static Safe Instance()
        {
            return new Safe();
        }

        public string ClientIp()
        {
            OperationContext context = OperationContext.Current;
            MessageProperties properties = context.IncomingMessageProperties;
            RemoteEndpointMessageProperty endpoint = properties[RemoteEndpointMessageProperty.Name] as RemoteEndpointMessageProperty;
            return endpoint.Address;
        }

        public string ClientPort()
        {
            OperationContext context = OperationContext.Current;
            MessageProperties properties = context.IncomingMessageProperties;
            RemoteEndpointMessageProperty endpoint = properties[RemoteEndpointMessageProperty.Name] as RemoteEndpointMessageProperty;
            return endpoint.Port.ToString();
        }

        public string ClientIpAndPort()
        {
            OperationContext context = OperationContext.Current;
            MessageProperties properties = context.IncomingMessageProperties;
            RemoteEndpointMessageProperty endpoint = properties[RemoteEndpointMessageProperty.Name] as RemoteEndpointMessageProperty;
            return endpoint.Address + ";" + endpoint.Port.ToString();
        }
    }
}

XML 存放可访问IP

1 <?xml version="1.0" encoding="utf-8" ?>
2 <configuration>
3   <ip>192.168.0.71</ip>
4   <ip>192.168.0.6</ip>
5   <ip>127.0.0.1</ip>
6   <ip>192.168.0.72</ip>
7   <ip>192.168.0.136</ip>
8   <ip>192.168.0.3</ip>
9 </configuration>

#region 特殊函数
      /// <summary>
        /// 匹配允许访问IP
        /// </summary>
        /// <param name="path">文件路径</param>
        /// <param name="node">节点名称</param>
        /// <returns>转换为DataTable</returns>
        public DataTable ReadRunIP(string path, string node)
        {
            XmlDocument doc = new XmlDocument();
            doc.Load(path);
            DataTable dt = new DataTable();
            dt.Columns.Add("ip", typeof(string));
            XmlNodeList xnlist = doc.SelectNodes(node);
            if (xnlist.Count > 0)
            {
                for (int i = 0; i < xnlist.Count; i++)
                {
                    DataRow dr = dt.NewRow();
                    dr["ip"] = xnlist[i].InnerText;
                    dt.Rows.Add(dr);
                }
            }
            return dt;
        }
        #endregion

页面加载时获取所有可访问IP

1 public static DataTable dtRunIp;
2 public static string MapPath = ConfigurationManager.ConnectionStrings["configPath"].ConnectionString; 
3        
4 protected void Application_Start(object sender, EventArgs e)
5 {
6     dtRunIp = XMLHelper.XmlHelper.Instance().ReadRunIP(MapPath + "/Config/RunConfig.config", "//configuration/ip");
7 }

判断IP许可

在服务中的应用：

 1 [ServiceContract]
 2     public class SOAControl
 3     {
 4         string msgr = "无访问权限、服务器积极拒绝";
 5         //获取xml文档
 6         [OperationContract]
 7         public string GetXML(ref string msg)
 8         {
 9         
10             if (Certificate.IsCanRead())
11             {              
12                 return XmlHelper.Instance().XmlDocumentToString(Global.MapPath + "/Control/Control.config".ToString());
13             }
14             else
15             {
16                 msg = msgr;
17                 return null;
18             }
19         }

 1 public static bool IsCanRead()
 2 {
 3     string clientIp = Tools.Safe.Instance().ClientIp();
 4     bool r = false;
 5     if (Global.dtRunIp.Rows.Count > 0)
 6     {
 7          for (int i = 0; i < Global.dtRunIp.Rows.Count; i++)
 8          {
 9               if (clientIp == Global.dtRunIp.Rows[i]["ip"].ToString())
10               {
11                   r = true;
12               }
13          }
14     }
15         return r;
16 
17 }

WCF的配置文件设置

<?xml version="1.0"?>
<configuration>
  <system.serviceModel>
    <bindings>
      <wsHttpBinding>
        <binding name="NoneSecurity"
        maxBufferPoolSize="12000000" maxReceivedMessageSize="12000000" useDefaultWebProxy="false">
          <readerQuotas maxStringContentLength="12000000" maxArrayLength="12000000"/>
          <security mode="None"/>
        </binding>
      </wsHttpBinding>
    </bindings>
    <behaviors>
      <serviceBehaviors>
        <behavior name="Control.Service.SOAControlBehavior">
          <serviceMetadata httpGetEnabled="true"/>
          <serviceDebug includeExceptionDetailInFaults="false"/>
        </behavior>
      </serviceBehaviors>
    </behaviors>
    <services>
      <service behaviorConfiguration="Control.Service.SOAControlBehavior" name="Control.Service.SOAControl">
        <endpoint address="" binding="wsHttpBinding" contract="Control.Service.SOAControl" bindingConfiguration="NoneSecurity">
          <identity>
            <dns value="localhost"/>
          </identity>
        </endpoint>
        <endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange"/>
      </service>
    </services>
  </system.serviceModel>
</configuration>