Code:
/ Dotnetfx_Vista_SP2 / Dotnetfx_Vista_SP2 / 8.0.50727.4016 / DEVDIV / depot / DevDiv / releases / Orcas / QFE / ndp / fx / src / xsp / System / Web / Extensions / ApplicationServices / AuthenticationService.cs / 1 / AuthenticationService.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.ApplicationServices { using System; using System.Diagnostics.CodeAnalysis; using System.Security.Permissions; using System.ServiceModel; using System.ServiceModel.Activation; using System.Web; using System.Web.Management; using System.Web.Resources; using System.Web.Security; ////// Implements login service contract to be exposed as a WCF service. Uses Membership provider /// or custom authentication login in the Authenticating event. Also uses Forms.SetAuthCookie() or /// custom cookie generation via the CreatingCookie event. /// [ AspNetCompatibilityRequirements(RequirementsMode = AspNetCompatibilityRequirementsMode.Required), AspNetHostingPermission(SecurityAction.LinkDemand, Level = AspNetHostingPermissionLevel.Minimal), AspNetHostingPermission(SecurityAction.InheritanceDemand, Level = AspNetHostingPermissionLevel.Minimal), ServiceContract(Namespace="http://asp.net/ApplicationServices/v200"), ServiceBehavior(Namespace="http://asp.net/ApplicationServices/v200", InstanceContextMode = InstanceContextMode.Single, ConcurrencyMode = ConcurrencyMode.Multiple) ] public class AuthenticationService { ////// Raised to authenticate the user . The event handler sets the e.AuthenticationIsComplete flag to true /// and e.Authenticated to the result. /// private static object _authenticatingEventHandlerLock = new object(); private static EventHandler_authenticating; public static event EventHandler Authenticating { add { lock (_authenticatingEventHandlerLock) { _authenticating += value; } } remove { lock (_authenticatingEventHandlerLock) { _authenticating -= value; } } } /// /// Raised to create and set the cookie. The event handler shouldset the e.CookieIsSet flag to true, if it is /// setting the cookie. /// private static object _creatingCookieEventHandlerLock = new object(); private static EventHandler_creatingCookie; public static event EventHandler CreatingCookie { add { lock (_creatingCookieEventHandlerLock) { _creatingCookie += value; } } remove { lock (_creatingCookieEventHandlerLock) { _creatingCookie -= value; } } } //hiding constructors internal AuthenticationService() { } /// /// Raises the AuthentincatingEvent if atleast one handler is assigned. /// private void OnAuthenticating(AuthenticatingEventArgs e) { EventHandlerhandler = _authenticating; if (null != handler) { handler(this, e); } } /// /// Raises the CreatingCookieEvent if atleast one handler is assigned. /// private void OnCreatingCookie(CreatingCookieEventArgs e) { EventHandlerhandler = _creatingCookie; if (null != handler) { handler(this, e); } } /// /// Validates user credentials,without actually setting the FormAuth cookie /// /// Username of the account /// Password of the account /// Any misc. string to be used by custom authentication logic ///True, if credentials are valid, otherwise false [OperationContract] [SuppressMessage("Microsoft.Naming", "CA1702:CompoundWordsShouldBeCasedCorrectly", MessageId="username", Justification="consistent with Whidbey")] public bool ValidateUser(string username, string password, string customCredential) { ApplicationServiceHelper.EnsureAuthenticationServiceEnabled(HttpContext.Current, true); return LoginInternal(username, password, customCredential, false, false); } ////// Validates user credentials,and sets the FormAuth cookie if the credentials are valid. /// /// Username of the account /// Password of the account /// Any misc. string to be used by custom authentication logic /// If true the persistant cookie is generated. ///True, if credentials are valid, otherwise false [OperationContract] [SuppressMessage("Microsoft.Naming", "CA1702:CompoundWordsShouldBeCasedCorrectly", MessageId="username", Justification="consistent with Whidbey")] public bool Login(string username, string password, string customCredential, bool isPersistent) { ApplicationServiceHelper.EnsureAuthenticationServiceEnabled(HttpContext.Current, true); return LoginInternal(username, password, customCredential, isPersistent, true); } ////// Checks whether the Forms Authentication cookie attached to the request is valid. /// [OperationContract] public bool IsLoggedIn() { ApplicationServiceHelper.EnsureAuthenticationServiceEnabled(HttpContext.Current, true); return HttpContext.Current.User.Identity.IsAuthenticated; } ////// Clears the Forms Authentication cookie /// [OperationContract] public void Logout() { ApplicationServiceHelper.EnsureAuthenticationServiceEnabled(HttpContext.Current, false); FormsAuthentication.SignOut(); } ////// Validates the user credentials. /// /// /// /// /// /// If this is true, CreatingCookie event is raised, and cookie is set in HttpResponse ///private bool LoginInternal(string username, string password, string customCredential, bool isPersistent, bool setCookie) { if (null == username) { throw new ArgumentNullException("username"); } if (null == password) { throw new ArgumentNullException("password"); } AuthenticatingEventArgs authEventArgs = new AuthenticatingEventArgs(username, password, customCredential); try { OnAuthenticating(authEventArgs); if (!authEventArgs.AuthenticationIsComplete) { MembershipValidate(authEventArgs); } if (!authEventArgs.Authenticated) { Logout(); } if (authEventArgs.Authenticated && setCookie) { CreatingCookieEventArgs cookieEventArgs = new CreatingCookieEventArgs(username, password, isPersistent, customCredential); OnCreatingCookie(cookieEventArgs); if (!cookieEventArgs.CookieIsSet) { SetCookie(username, isPersistent); } } } catch (Exception e) { LogException(e); throw; } return authEventArgs.Authenticated; } private static void MembershipValidate(AuthenticatingEventArgs e) { e.Authenticated = Membership.ValidateUser(e.UserName, e.Password); } private static void SetCookie(string username, bool isPersistent) { FormsAuthentication.SetAuthCookie(username, isPersistent); } private void LogException(Exception e) { WebServiceErrorEvent errorevent = new WebServiceErrorEvent(AtlasWeb.UnhandledExceptionEventLogMessage, this, e); errorevent.Raise(); } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. //------------------------------------------------------------------------------ // // Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.ApplicationServices { using System; using System.Diagnostics.CodeAnalysis; using System.Security.Permissions; using System.ServiceModel; using System.ServiceModel.Activation; using System.Web; using System.Web.Management; using System.Web.Resources; using System.Web.Security; ////// Implements login service contract to be exposed as a WCF service. Uses Membership provider /// or custom authentication login in the Authenticating event. Also uses Forms.SetAuthCookie() or /// custom cookie generation via the CreatingCookie event. /// [ AspNetCompatibilityRequirements(RequirementsMode = AspNetCompatibilityRequirementsMode.Required), AspNetHostingPermission(SecurityAction.LinkDemand, Level = AspNetHostingPermissionLevel.Minimal), AspNetHostingPermission(SecurityAction.InheritanceDemand, Level = AspNetHostingPermissionLevel.Minimal), ServiceContract(Namespace="http://asp.net/ApplicationServices/v200"), ServiceBehavior(Namespace="http://asp.net/ApplicationServices/v200", InstanceContextMode = InstanceContextMode.Single, ConcurrencyMode = ConcurrencyMode.Multiple) ] public class AuthenticationService { ////// Raised to authenticate the user . The event handler sets the e.AuthenticationIsComplete flag to true /// and e.Authenticated to the result. /// private static object _authenticatingEventHandlerLock = new object(); private static EventHandler_authenticating; public static event EventHandler Authenticating { add { lock (_authenticatingEventHandlerLock) { _authenticating += value; } } remove { lock (_authenticatingEventHandlerLock) { _authenticating -= value; } } } /// /// Raised to create and set the cookie. The event handler shouldset the e.CookieIsSet flag to true, if it is /// setting the cookie. /// private static object _creatingCookieEventHandlerLock = new object(); private static EventHandler_creatingCookie; public static event EventHandler CreatingCookie { add { lock (_creatingCookieEventHandlerLock) { _creatingCookie += value; } } remove { lock (_creatingCookieEventHandlerLock) { _creatingCookie -= value; } } } //hiding constructors internal AuthenticationService() { } /// /// Raises the AuthentincatingEvent if atleast one handler is assigned. /// private void OnAuthenticating(AuthenticatingEventArgs e) { EventHandlerhandler = _authenticating; if (null != handler) { handler(this, e); } } /// /// Raises the CreatingCookieEvent if atleast one handler is assigned. /// private void OnCreatingCookie(CreatingCookieEventArgs e) { EventHandlerhandler = _creatingCookie; if (null != handler) { handler(this, e); } } /// /// Validates user credentials,without actually setting the FormAuth cookie /// /// Username of the account /// Password of the account /// Any misc. string to be used by custom authentication logic ///True, if credentials are valid, otherwise false [OperationContract] [SuppressMessage("Microsoft.Naming", "CA1702:CompoundWordsShouldBeCasedCorrectly", MessageId="username", Justification="consistent with Whidbey")] public bool ValidateUser(string username, string password, string customCredential) { ApplicationServiceHelper.EnsureAuthenticationServiceEnabled(HttpContext.Current, true); return LoginInternal(username, password, customCredential, false, false); } ////// Validates user credentials,and sets the FormAuth cookie if the credentials are valid. /// /// Username of the account /// Password of the account /// Any misc. string to be used by custom authentication logic /// If true the persistant cookie is generated. ///True, if credentials are valid, otherwise false [OperationContract] [SuppressMessage("Microsoft.Naming", "CA1702:CompoundWordsShouldBeCasedCorrectly", MessageId="username", Justification="consistent with Whidbey")] public bool Login(string username, string password, string customCredential, bool isPersistent) { ApplicationServiceHelper.EnsureAuthenticationServiceEnabled(HttpContext.Current, true); return LoginInternal(username, password, customCredential, isPersistent, true); } ////// Checks whether the Forms Authentication cookie attached to the request is valid. /// [OperationContract] public bool IsLoggedIn() { ApplicationServiceHelper.EnsureAuthenticationServiceEnabled(HttpContext.Current, true); return HttpContext.Current.User.Identity.IsAuthenticated; } ////// Clears the Forms Authentication cookie /// [OperationContract] public void Logout() { ApplicationServiceHelper.EnsureAuthenticationServiceEnabled(HttpContext.Current, false); FormsAuthentication.SignOut(); } ////// Validates the user credentials. /// /// /// /// /// /// If this is true, CreatingCookie event is raised, and cookie is set in HttpResponse ///private bool LoginInternal(string username, string password, string customCredential, bool isPersistent, bool setCookie) { if (null == username) { throw new ArgumentNullException("username"); } if (null == password) { throw new ArgumentNullException("password"); } AuthenticatingEventArgs authEventArgs = new AuthenticatingEventArgs(username, password, customCredential); try { OnAuthenticating(authEventArgs); if (!authEventArgs.AuthenticationIsComplete) { MembershipValidate(authEventArgs); } if (!authEventArgs.Authenticated) { Logout(); } if (authEventArgs.Authenticated && setCookie) { CreatingCookieEventArgs cookieEventArgs = new CreatingCookieEventArgs(username, password, isPersistent, customCredential); OnCreatingCookie(cookieEventArgs); if (!cookieEventArgs.CookieIsSet) { SetCookie(username, isPersistent); } } } catch (Exception e) { LogException(e); throw; } return authEventArgs.Authenticated; } private static void MembershipValidate(AuthenticatingEventArgs e) { e.Authenticated = Membership.ValidateUser(e.UserName, e.Password); } private static void SetCookie(string username, bool isPersistent) { FormsAuthentication.SetAuthCookie(username, isPersistent); } private void LogException(Exception e) { WebServiceErrorEvent errorevent = new WebServiceErrorEvent(AtlasWeb.UnhandledExceptionEventLogMessage, this, e); errorevent.Raise(); } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- SettingsPropertyCollection.cs
- DesignerActionList.cs
- ParseHttpDate.cs
- UrlMappingsSection.cs
- TerminateDesigner.cs
- TextProviderWrapper.cs
- RPIdentityRequirement.cs
- MultiAsyncResult.cs
- TextFormatterContext.cs
- GetCertificateRequest.cs
- PolicyStatement.cs
- Point3DCollectionConverter.cs
- MessageQueuePermissionEntry.cs
- Point3D.cs
- ObjectTypeMapping.cs
- ConfigXmlElement.cs
- BindingMemberInfo.cs
- OdbcDataAdapter.cs
- PartialTrustValidationBehavior.cs
- SystemIPInterfaceProperties.cs
- ControlIdConverter.cs
- ElementHost.cs
- AttributeSetAction.cs
- SmiMetaData.cs
- CookieProtection.cs
- RegexCapture.cs
- RenderOptions.cs
- TemplateEditingFrame.cs
- CodeComment.cs
- WaveHeader.cs
- UIElementParagraph.cs
- FilteredXmlReader.cs
- UInt16.cs
- XmlSerializationGeneratedCode.cs
- WindowsListBox.cs
- IconConverter.cs
- BitmapMetadata.cs
- InternalDispatchObject.cs
- FormViewPagerRow.cs
- SqlDataSourceQueryConverter.cs
- WbmpConverter.cs
- DesignerToolStripControlHost.cs
- GridPatternIdentifiers.cs
- SafeThreadHandle.cs
- ContextStack.cs
- ToolStripRenderer.cs
- MailDefinitionBodyFileNameEditor.cs
- XamlBrushSerializer.cs
- XmlAttributes.cs
- SystemBrushes.cs
- EdgeModeValidation.cs
- Win32.cs
- RawAppCommandInputReport.cs
- TextTreeUndo.cs
- URLEditor.cs
- DataGridViewDesigner.cs
- StylusPlugin.cs
- MetadataArtifactLoaderFile.cs
- DBAsyncResult.cs
- OleDbRowUpdatedEvent.cs
- RightsManagementResourceHelper.cs
- IODescriptionAttribute.cs
- ListViewItem.cs
- QuadraticBezierSegment.cs
- TrackingMemoryStreamFactory.cs
- Util.cs
- ListSurrogate.cs
- FontDialog.cs
- XmlWellformedWriter.cs
- InvalidMessageContractException.cs
- X509CertificateValidator.cs
- RealizationContext.cs
- GeometryDrawing.cs
- MemberAccessException.cs
- RightsManagementProvider.cs
- MultiplexingFormatMapping.cs
- SecurityResources.cs
- BitmapSizeOptions.cs
- CurrencyManager.cs
- PageClientProxyGenerator.cs
- DescendentsWalker.cs
- ResponseStream.cs
- ThreadExceptionDialog.cs
- Repeater.cs
- FreezableOperations.cs
- SpanIndex.cs
- webeventbuffer.cs
- ValidatedControlConverter.cs
- MouseGesture.cs
- ConstrainedDataObject.cs
- OrderPreservingPipeliningMergeHelper.cs
- FeatureSupport.cs
- SQLBoolean.cs
- TemplateEditingService.cs
- DataServiceBehavior.cs
- BitmapData.cs
- MeasureItemEvent.cs
- SingleStorage.cs
- XmlSchemaIdentityConstraint.cs
- EFTableProvider.cs