Web Service 中的身份验证策略--使用自定义SOAP 标题

【IT168技术文档】

  自定义SOAP标题可以限制调用服务的用户范围

1using System;
2using System.Web;
3using System.Web.Services;
4using System.Web.Services.Protocols;
5
6[WebService(Namespace = "http://livebaby.cn")]
7[WebServiceBinding(ConformsTo = WsiProfiles.BasicProfile1_1)]
8public class Service : System.Web.Services.WebService
9{
10    public SecurityHeader currentUser;
11    public Service()
12    {
13
14        //如果使用设计的组件，请取消注释以下行 
15        //InitializeComponent(); 
16    }
17    [WebMethod, SoapHeader("currentUser")]
18    public string GetResult(string queryString)
19    {
20        if(ValidateUser(currentUser.UserName,currentUser.UserPass))
21        {
22            return "你发送的字符串是:"+queryString;
23        }
24        else
25            return "对不起:" + currentUser.UserName+",您不是合法的用户!";
26    }
27    //检验SOAP　HEADER 
28    private bool ValidateUser(string user, string pass)
29    {
30        if (user.Equals("user") && pass.Equals("user"))
31            return true;
32        else
33            return false;
34    }
35}
36//自定义Soap Header　Class
37public class SecurityHeader : System.Web.Services.Protocols.SoapHeader
38{
39    public string UserName;
40    public string UserPass;
41}