webRequest for authenticate

public class NewsDac { static readonly NewsDac __instance = new NewsDac(); static string NewsLogin = HttpUtility.UrlDecode(ConfigurationSettings.AppSettings["NewsLogin"]); static string NewsContent = HttpUtility.UrlDecode(ConfigurationSettings.AppSettings["NewsContent"]); public static NewsDac Current { get { return __instance; } } private NewsDac() { // // TODO: Add constructor logic here // } private Cookie _authenticate = null; private void Authenticate() { System.Console.WriteLine("NewsDac:Authenticate"); HttpWebRequest webRequest = (HttpWebRequest)WebRequest.Create(NewsLogin); webRequest.CookieContainer = new CookieContainer(); webRequest.AllowAutoRedirect = false; //Delete old xoi // HttpWebRequest webRequest = (HttpWebRequest)WebRequest.Create(StocknetJsCfg.Xoi_UrlLogin); // webRequest.Credentials = new NetworkCredential(StocknetJsCfg.Xoi_User, StocknetJsCfg.Xoi_Pwd); using (HttpWebResponse webResponse = (HttpWebResponse)webRequest.GetResponse()) { _authenticate = webResponse.Cookies["NewsSvc"]; } } public XmlDocument FetchContent(string source, string id) { if (_authenticate == null) { Authenticate(); } XmlDocument doc = FetchContentInner(source, id); int ret = CheckContent(doc); if (ret == 1) { Authenticate(); doc = FetchContentInner(source, id); ret = CheckContent(doc); } return ret == 0 ? doc : null; } /// <summary> /// /// </summary> /// <param name="doc"></param> /// <returns> /// 0, success /// 1, authendicate fail /// 2, other reason /// </returns> private int CheckContent(XmlDocument doc) { int ret = 2; if (doc != null ) { if (doc.DocumentElement.LocalName == "Error") { if (XmlOp.GetTextByXPath(doc.DocumentElement, "@Number") == "401") { ret = 1; } } else { XmlNode node = doc.DocumentElement.SelectSingleNode("Document/Content/Title"); if (node != null) { ret = 0; } } } System.Console.WriteLine("NewsDac:Fail other reason"); return ret; } private XmlDocument FetchContentInner(string source, string id) { HttpWebRequest webRequest = (HttpWebRequest)WebRequest.Create( string.Format(NewsContent, source, id)); webRequest.CookieContainer = new CookieContainer(); webRequest.CookieContainer.Add(_authenticate); webRequest.Headers["Accept-Encoding"] = "gzip"; XmlDocument doc = new XmlDocument(); using (HttpWebResponse webResponse = (HttpWebResponse)webRequest.GetResponse()) { Stream respDecode = webResponse.GetResponseStream(); switch (webResponse.ContentEncoding) { case "gzip": GZipStream zipStream = new GZipStream(respDecode, CompressionMode.Decompress); respDecode = zipStream; break; case "deflate": DeflateStream deflateStream = new DeflateStream(respDecode, CompressionMode.Decompress); respDecode = deflateStream; break; default: // "text/xml" break; } doc.Load(respDecode); } return doc; } }

 

public class XoiXml { private string authenticateCookieText; private static readonly Regex expiresRegex = new Regex("expires=[^;]+;"); private int authSequence = 0; public void Init() { Authenticate(authSequence); } private void Authenticate(int curSequence) { try { lock(expiresRegex) { if (curSequence==authSequence) { HttpWebRequest webRequest = (HttpWebRequest)WebRequest.Create(HttpUtility.UrlDecode(StocknetJsCfg.Xoi_UrlLoginExt)); webRequest.AllowAutoRedirect = false; // HttpWebRequest webRequest = (HttpWebRequest)WebRequest.Create(UrlLogin); // webRequest.Credentials = new NetworkCredential(User, Pwd); HttpWebResponse webResponse = (HttpWebResponse)webRequest.GetResponse(); authenticateCookieText = webResponse.Headers.Get(AuthHeaderKey); //Add for fix xoi cookies int index = authenticateCookieText.IndexOf("path=/,"); if (index > 0) { authenticateCookieText = authenticateCookieText.Substring(0, index+6); } //authenticateCookieText = webResponse.Headers[AuthHeaderKey]; //Remove expires info authenticateCookieText = expiresRegex.Replace(authenticateCookieText, ""); //Increase sequence for avoiding repeat authSequence authSequence++; } } } catch (Exception e) { Util.Current.Log.Error(e.ToString()); } } /// <summary> /// Call inner GetDomByUrl_ to load XPathDocument /// </summary> /// <param name="url"></param> /// <returns></returns> private XPathDocument GetDomByUrl(string url) { try { return GetDomByUrl_(url); } catch (Exception e) { Util.Current.Log.Error(e.ToString()); Util.Current.Log.Error("GetDomByUrl, url:"+url); string msg = e.Message; if (msg.IndexOf("404") > 0) { return null; } else //first fail, authenticate and try again { Authenticate(authSequence); return GetDomByUrl_(url); } } finally { } return null; } /// <summary> /// Inner GetDomByUrl /// </summary> /// <param name="url"></param> /// <returns></returns> private XPathDocument GetDomByUrl_(string url) { HttpWebRequest webRequest = (HttpWebRequest)WebRequest.Create(url); webRequest.Headers.Set("Accept-Encoding","gzip"); webRequest.CookieContainer = new CookieContainer(); webRequest.CookieContainer.SetCookies(webRequest.Address, authenticateCookieText); HttpWebResponse webResponse = (HttpWebResponse)webRequest.GetResponse(); Stream respDecode; switch (webResponse.ContentEncoding) { case "gzip": respDecode = new GZipInputStream(webResponse.GetResponseStream()); break; case "deflate": respDecode = new InflaterInputStream(webResponse.GetResponseStream(), new Inflater(true)); break; default: // "text/xml" respDecode = webResponse.GetResponseStream(); break; } XPathDocument doc = new XPathDocument(respDecode); return doc; } }

 

身份验证选项

.NET Remoting 没有自己的安全模式：身份验证和授权是由通道和主机进程执行的，在这种情况下则由 IIS 执行。Windows 身份验证可用于 Remoting，配置方法是在 web.config 中设置 <authentication mode="Windows"/>。不能使用表单或 Passport 身份验证，因为 Remoting 客户端不能访问 Cookie，也不能重新定向到登录页面（因为远程服务器是为非交互使用设计的）。

将凭据传递到远程对象

如果远程对象是 IIS 集成的（在 ASP.NET 辅助进程中）并配置为使用 Windows 身份验证，则必须使用通道的凭据属性指定要使用的凭据，否则将导致不传递任何凭据就进行远程调用。这种疏忽是 HTTP 访问拒绝响应的常见原因。要使用集成远程对象代理的进程（Remoting 客户端进程）的凭据，请将通道的凭据属性设置为由进程凭据缓存维护的 DefaultCredentials 。这可以使用通道元素（用于 Web 客户端），即 <channel ref="http" useDefaultCredentials="true"/> 公开地完成，也可以使用以下代码通过编程方式完成：

IDictionary channelProperties;

channelProperties = ChannelServices.GetChannelSinkProperties(proxy);

channelProperties["credentials"] = CredentialCache.DefaultCredentials;

要随远程对象调用一起传递“特定的”凭据，请禁用默认凭据，即设置 <channel ref="http" useDefaultCredentials="false"/> 并使用以下代码：

IDictionary channelProperties =

ChannelServices.GetChannelSinkProperties(proxy);

NetworkCredential credentials;

credentials = new NetworkCredential("username", "password", "domain");

ObjRef objectReference = RemotingServices.Marshal(proxy);

Uri objectUri = new Uri(objectReference.URI);

CredentialCache credCache = new CredentialCache();

// 用 Negotiate、Basic、Digest、

// Kerberos 或 NTLM 替换 authenticationType

credCache.Add(objectUri, "authenticationType", credentials);

channelProperties["credentials"] = credCache;

channelProperties["preauthenticate"] = true;

格式化选择

作为标准，Remoting 可以配置为在 HTTP 通道上使用 SOAP 或二进制格式化程序，或者在 TCP 通道上使用二进制格式化程序。一般情况下，在客户端配置文件中输入适当的条目和调用静态的 RemotingConfiguration.Configure 方法都可以实现这种配置。

例如，要将 Remoting 连接配置为使用 HTTP 上的二进制格式化程序，可以按以下方法完成配置条目：

<channel ref="http" useDefaultCredentials="true" port="0"> <clientProviders> <formatter ref="binary"/> </clientProviders> </channel>