SecurityDuplexSessionChannel.cs 5.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185
  1. //
  2. // SecurityRequestChannel.cs
  3. //
  4. // Author:
  5. // Atsushi Enomoto <[email protected]>
  6. //
  7. // Copyright (C) 2006 Novell, Inc (http://www.novell.com)
  8. //
  9. // Permission is hereby granted, free of charge, to any person obtaining
  10. // a copy of this software and associated documentation files (the
  11. // "Software"), to deal in the Software without restriction, including
  12. // without limitation the rights to use, copy, modify, merge, publish,
  13. // distribute, sublicense, and/or sell copies of the Software, and to
  14. // permit persons to whom the Software is furnished to do so, subject to
  15. // the following conditions:
  16. //
  17. // The above copyright notice and this permission notice shall be
  18. // included in all copies or substantial portions of the Software.
  19. //
  20. // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  21. // EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  22. // MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  23. // NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
  24. // LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
  25. // OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
  26. // WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  27. //
  28. using System;
  29. using System.Collections.Generic;
  30. using System.Collections.ObjectModel;
  31. using System.IdentityModel.Selectors;
  32. using System.IdentityModel.Tokens;
  33. using System.Runtime.Serialization;
  34. using System.Security.Cryptography;
  35. using System.Security.Cryptography.X509Certificates;
  36. using System.Security.Cryptography.Xml;
  37. using System.ServiceModel;
  38. using System.ServiceModel.Channels;
  39. using System.ServiceModel.Description;
  40. using System.ServiceModel.Security;
  41. using System.ServiceModel.Security.Tokens;
  42. using System.Xml;
  43. using System.Xml.XPath;
  44. using ReqType = System.ServiceModel.Security.Tokens.ServiceModelSecurityTokenRequirement;
  45. namespace System.ServiceModel.Channels.Security
  46. {
  47. class SecurityDuplexSession : DuplexSessionBase
  48. {
  49. SecurityDuplexSessionChannel channel;
  50. public SecurityDuplexSession (SecurityDuplexSessionChannel channel)
  51. {
  52. this.channel = channel;
  53. }
  54. public override TimeSpan DefaultCloseTimeout {
  55. get { return channel.DefaultCloseTimeout; }
  56. }
  57. public override void Close (TimeSpan timeout)
  58. {
  59. // valid only if the inner channel is ISessionChannel
  60. var d = channel.Channel as IDuplexSessionChannel;
  61. if (d != null)
  62. d.Session.CloseOutputSession (timeout);
  63. }
  64. }
  65. class SecurityDuplexSessionChannel : DuplexChannelBase, IDuplexSessionChannel
  66. {
  67. IChannel channel;
  68. InitiatorMessageSecurityBindingSupport security_initiator;
  69. RecipientMessageSecurityBindingSupport security_recipient;
  70. SecurityDuplexSession session;
  71. public SecurityDuplexSessionChannel (ChannelFactoryBase factory, IChannel innerChannel, EndpointAddress remoteAddress, Uri via, InitiatorMessageSecurityBindingSupport security)
  72. : base (factory, remoteAddress, via)
  73. {
  74. this.channel = innerChannel;
  75. session = new SecurityDuplexSession (this);
  76. InitializeSecurityFunctionality (security);
  77. }
  78. public SecurityDuplexSessionChannel (ChannelListenerBase listener, IChannel innerChannel, RecipientMessageSecurityBindingSupport security)
  79. : base (listener)
  80. {
  81. this.channel = innerChannel;
  82. session = new SecurityDuplexSession (this);
  83. InitializeSecurityFunctionality (security);
  84. }
  85. public IChannel Channel {
  86. get { return channel; }
  87. }
  88. public IDuplexSession Session {
  89. get { return session; }
  90. }
  91. void InitializeSecurityFunctionality (InitiatorMessageSecurityBindingSupport security)
  92. {
  93. security_initiator = security;
  94. }
  95. void InitializeSecurityFunctionality (RecipientMessageSecurityBindingSupport security)
  96. {
  97. security_recipient = security;
  98. }
  99. protected override void OnOpen (TimeSpan timeout)
  100. {
  101. channel.Open (timeout);
  102. if (security_initiator != null)
  103. security_initiator.Prepare ((ChannelFactoryBase) Manager, RemoteAddress);
  104. else
  105. security_recipient.Prepare ((ChannelListenerBase) Manager, LocalAddress.Uri);
  106. }
  107. protected override void OnClose (TimeSpan timeout)
  108. {
  109. if (security_initiator != null)
  110. security_initiator.Release ();
  111. else
  112. security_recipient.Release ();
  113. channel.Close (timeout);
  114. }
  115. protected override void OnAbort ()
  116. {
  117. if (security_initiator != null)
  118. security_initiator.Release ();
  119. else
  120. security_recipient.Release ();
  121. channel.Abort ();
  122. }
  123. public override bool TryReceive (TimeSpan timeout, out Message message)
  124. {
  125. ThrowIfDisposedOrNotOpen ();
  126. var input = (IInputChannel) channel;
  127. if (!input.TryReceive (timeout, out message))
  128. return false;
  129. message = DecryptMessage (message);
  130. return true;
  131. }
  132. public override bool WaitForMessage (TimeSpan timeout)
  133. {
  134. var input = (IInputChannel) channel;
  135. return input.WaitForMessage (timeout);
  136. }
  137. public override void Send (Message message)
  138. {
  139. Send (message, DefaultSendTimeout);
  140. }
  141. public override void Send (Message message, TimeSpan timeout)
  142. {
  143. Message secure = SecureMessage (message);
  144. var output = (IOutputChannel) channel;
  145. output.Send (secure, timeout);
  146. }
  147. Message SecureMessage (Message msg)
  148. {
  149. if (security_initiator != null)
  150. return new InitiatorMessageSecurityGenerator (msg, security_initiator, RemoteAddress).SecureMessage ();
  151. else
  152. return new RecipientMessageSecurityGenerator (msg, null, security_recipient).SecureMessage (); // FIXME: supply SecurityMessageProperty (if any)
  153. }
  154. Message DecryptMessage (Message msg)
  155. {
  156. if (security_initiator != null)
  157. return new InitiatorSecureMessageDecryptor (msg, null, security_initiator).DecryptMessage (); // FIXME: supply SecurityMessageProperty (if any)
  158. else
  159. return new RecipientSecureMessageDecryptor (msg, security_recipient).DecryptMessage ();
  160. }
  161. }
  162. }