Code:
/ FXUpdate3074 / FXUpdate3074 / 1.1 / DEVDIV / depot / DevDiv / releases / whidbey / QFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- DataGridViewTopRowAccessibleObject.cs
- HttpFileCollection.cs
- DataGridViewElement.cs
- ADConnectionHelper.cs
- DesignRelationCollection.cs
- ConfigurationValue.cs
- List.cs
- ToolStripContainerDesigner.cs
- XamlNamespaceHelper.cs
- WebPermission.cs
- EntityContainer.cs
- XsltQilFactory.cs
- LabelLiteral.cs
- FormsAuthenticationEventArgs.cs
- XmlCharType.cs
- ReadOnlyDictionary.cs
- BaseDataBoundControl.cs
- MultiDataTrigger.cs
- BuildResultCache.cs
- BitmapScalingModeValidation.cs
- ConfigurationManagerInternalFactory.cs
- WpfGeneratedKnownProperties.cs
- SequentialWorkflowRootDesigner.cs
- DataGridViewSelectedCellsAccessibleObject.cs
- QueryCacheEntry.cs
- HttpFileCollectionWrapper.cs
- DiscoveryUtility.cs
- TraceHwndHost.cs
- PropertyGridEditorPart.cs
- dsa.cs
- ServiceAuthorizationManager.cs
- TextEffect.cs
- Model3DGroup.cs
- PathStreamGeometryContext.cs
- XMLSchema.cs
- HandlerBase.cs
- WindowsListViewItem.cs
- BookmarkScopeHandle.cs
- MessageQueuePermission.cs
- PropertyFilterAttribute.cs
- PortCache.cs
- SpellerInterop.cs
- XmlDictionaryWriter.cs
- printdlgexmarshaler.cs
- CatalogPartChrome.cs
- DrawingContextDrawingContextWalker.cs
- SendMessageRecord.cs
- DescriptionCreator.cs
- SqlVisitor.cs
- SessionStateContainer.cs
- ProcessingInstructionAction.cs
- figurelength.cs
- CultureInfo.cs
- AlgoModule.cs
- SymbolType.cs
- IntranetCredentialPolicy.cs
- SqlVersion.cs
- IsolationInterop.cs
- SystemIcmpV4Statistics.cs
- TypedTableBaseExtensions.cs
- TextEditorTables.cs
- TTSEngineProxy.cs
- Utils.cs
- PreloadedPackages.cs
- dbenumerator.cs
- DropDownButton.cs
- CodeIndexerExpression.cs
- TextFormatterHost.cs
- ToolBar.cs
- ImageAttributes.cs
- MulticastOption.cs
- TraceSection.cs
- SystemResources.cs
- LineMetrics.cs
- TypeConverterAttribute.cs
- UnauthorizedWebPart.cs
- CssTextWriter.cs
- HtmlInputImage.cs
- ProgressBarRenderer.cs
- CustomTypeDescriptor.cs
- WindowsListViewItemStartMenu.cs
- XmlObjectSerializerReadContext.cs
- SoapExtensionTypeElementCollection.cs
- UIAgentAsyncParams.cs
- SystemFonts.cs
- SkewTransform.cs
- Helpers.cs
- Trace.cs
- SafeNativeMethods.cs
- Pen.cs
- Helper.cs
- ComponentCollection.cs
- CellRelation.cs
- FamilyMapCollection.cs
- DataObjectAttribute.cs
- FontInfo.cs
- IntranetCredentialPolicy.cs
- RegisteredDisposeScript.cs
- ProjectionPathSegment.cs
- TransactionBehavior.cs