WCF加密传输数据,b并且用户名+密码验证

在前2个文章的基础上,继续增加对client 端增加username+password的验证

1. host增加类Validator,需要添加引用

using System.IdentityModel.Selectors;

class Validator : UserNamePasswordValidator

{

public override void Validate(string userName, string password)

{

if (userName != "admin" || password != "123456")

{

throw new System.IdentityModel.Tokens.SecurityTokenException("Unknown Username or Password");

}

}

}

1. host中修改binding

BindingsàwsHttpBindingàbinding下增加

<security mode="Message">

<message clientCredentialType="UserName" />

</security>

1. host修改Behavior

BehaviorsàserviceBehaviorsà对应的behavioràserviceCredentials下增加

<userNameAuthentication userNamePasswordValidationMode="Custom" customUserNamePasswordValidatorType="WCFHost.Validator,WCFHost"/>

WCFHost.CalcValidator:验证器的类

WCFHost:验证器的命名空间,dll名字?

1. Client修改binding

<wsHttpBinding>

<binding name="WSHttpBinding_ICalculator">

<security mode="Message">

<message clientCredentialType="UserName" />

</security>

</binding>

</wsHttpBinding>

1. 客户端代码

client.ClientCredentials.UserName.UserName = "admin";

client.ClientCredentials.UserName.Password = "123456";

或者

ChannelFactory<ICalculator> factory = new ChannelFactory<ICalculator>("xxxx");

factory.Credentials.UserName.UserName="admin1";
 factory.Credentials.UserName.Password = "123456";

1. 测试

尝试修改UserName,password,调用不成功

注意:

1. 要用username这种方式验证,好像必须使用证书来加密username和password
2. 用nettcpbinding同样可以证书+username,password来实现,不想试了,
3. var name = OperationContext.Current.ServiceSecurityContext.PrimaryIdentity.Name;服务端可以查看登录人信息

源码下载:https://download.csdn.net/download/hanghangz/11042084