Code:
/ FXUpdate3074 / FXUpdate3074 / 1.1 / untmp / whidbey / QFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. // Copyright (c) Microsoft Corporation. All rights reserved.
Link Menu

This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- FormsAuthenticationModule.cs
- _NestedSingleAsyncResult.cs
- TemplateNameScope.cs
- JournalEntry.cs
- BulletedListEventArgs.cs
- ProgressBarAutomationPeer.cs
- XmlSchemaRedefine.cs
- EdmFunction.cs
- CfgParser.cs
- DesignerSerializationOptionsAttribute.cs
- BaseAddressElementCollection.cs
- SqlTriggerContext.cs
- XsdBuildProvider.cs
- ProcessStartInfo.cs
- VariableExpressionConverter.cs
- NullableLongSumAggregationOperator.cs
- MarkedHighlightComponent.cs
- CompoundFileReference.cs
- DataRelationPropertyDescriptor.cs
- AtomParser.cs
- FontWeight.cs
- QueryCoreOp.cs
- MaterialCollection.cs
- FormsAuthenticationCredentials.cs
- CalendarButtonAutomationPeer.cs
- XmlAttributeAttribute.cs
- _ConnectOverlappedAsyncResult.cs
- LinearGradientBrush.cs
- GeneralTransform3D.cs
- XmlSchemaAttribute.cs
- IgnoreFlushAndCloseStream.cs
- QilList.cs
- WebEventTraceProvider.cs
- CultureInfoConverter.cs
- AliasGenerator.cs
- HostedImpersonationContext.cs
- ObjectAssociationEndMapping.cs
- SafeHGlobalHandleCritical.cs
- SortedList.cs
- SamlNameIdentifierClaimResource.cs
- ImageCodecInfoPrivate.cs
- XmlWrappingWriter.cs
- PointCollection.cs
- SByteConverter.cs
- XmlDataSourceView.cs
- FormParameter.cs
- StickyNoteContentControl.cs
- PageWrapper.cs
- OleDbConnectionPoolGroupProviderInfo.cs
- ScriptReferenceEventArgs.cs
- SubMenuStyleCollection.cs
- ToolstripProfessionalRenderer.cs
- CellParaClient.cs
- SessionEndedEventArgs.cs
- UrlAuthFailedErrorFormatter.cs
- SystemIPGlobalStatistics.cs
- validationstate.cs
- LockCookie.cs
- ItemsControlAutomationPeer.cs
- ServiceTimeoutsElement.cs
- WindowPatternIdentifiers.cs
- ContractMapping.cs
- ResXResourceWriter.cs
- DesignerCategoryAttribute.cs
- DataSourceControl.cs
- CodeAttachEventStatement.cs
- BasicCellRelation.cs
- SqlGenerator.cs
- MultiByteCodec.cs
- LocationInfo.cs
- WindowsSysHeader.cs
- SoapIncludeAttribute.cs
- DbConnectionPoolGroupProviderInfo.cs
- ScrollData.cs
- LOSFormatter.cs
- ProfileGroupSettingsCollection.cs
- CompiledRegexRunner.cs
- UserControlDesigner.cs
- ExpressionQuoter.cs
- ListenerConfig.cs
- SafeNativeMemoryHandle.cs
- InvariantComparer.cs
- MergablePropertyAttribute.cs
- LoginCancelEventArgs.cs
- ChannelServices.cs
- EditCommandColumn.cs
- LocalValueEnumerator.cs
- TypeExtension.cs
- TransactedBatchingElement.cs
- ActivityMetadata.cs
- DataColumn.cs
- ExpiredSecurityTokenException.cs
- UnionExpr.cs
- ValidationRuleCollection.cs
- EnumerableCollectionView.cs
- ProfilePropertySettings.cs
- ApplicationInterop.cs
- DataKey.cs
- SafeHandle.cs
- ConnectorSelectionGlyph.cs