时间戳

首页 > 解决方案 > 使用 c# 代码在 Header 中使用 Assertion Saml2 创建 SOAP 消息

c# - 使用 c# 代码在 Header 中使用 Assertion Saml2 创建 SOAP 消息

问题描述

我有一个政府 Web 服务器，其中包含我需要使用的公开服务。到目前为止，对于同一 Web 服务器的其他服务，我已经这样做了：我创建了一个 CustomBinding，它创建了一个只有 Security 标记的 Header。这是代码：

 var sec = new AsymmetricSecurityBindingElement(
            new X509SecurityTokenParameters(X509KeyIdentifierClauseType.Any, SecurityTokenInclusionMode.Never),
new X509SecurityTokenParameters(X509KeyIdentifierClauseType.Any, SecurityTokenInclusionMode.AlwaysToRecipient));
sec.MessageSecurityVersion = MessageSecurityVersion.WSSecurity10WSTrust13WSSecureConversation13WSSecurityPolicy12BasicSecurityProfile10;
sec.SecurityHeaderLayout = SecurityHeaderLayout.Strict;
sec.IncludeTimestamp = true;
sec.SetKeyDerivation(false);
sec.KeyEntropyMode = System.ServiceModel.Security.SecurityKeyEntropyMode.ServerEntropy;
sec.EnableUnsecuredResponse = true;              

CustomBinding myBinding = new CustomBinding();

myBinding.Elements.Add(sec);
myBinding.Elements.Add(new TextMessageEncodingBindingElement(MessageVersion.Soap11, Encoding.UTF8));
myBinding.Elements.Add(new HttpsTransportBindingElement());

这是 CustomBinding() 得到的结果；

<s:Header><VsDebuggerCausalityData xmlns="http://schemas.microsoft.com/vstudio/diagnostics/servicemodelsink">uIDPowknFB+N96ZEtO/wdI2E9acAAAAAcJdp/1Hm1EmYTKrs1mDzIDxAUSKqP+BEuW7DUbd1RNIACQAA</VsDebuggerCausalityData>
<o:Security s:mustUnderstand="1" xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
    <u:Timestamp u:Id="uuid-a770c99d-342d-4dea-8b28-271df0df9703-1">
        <u:Created>2020-11-14T09:48:00.479Z</u:Created>
        <u:Expires>2020-11-14T09:53:00.479Z</u:Expires>
    </u:Timestamp>
<o:BinarySecurityToken u:Id="uuid-7f91b027-5e8e-49e2-a949-9dc6a0401d65-2" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">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
</o:BinarySecurityToken>
<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
    <SignedInfo>
        <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
        <Reference URI="#uuid-a770c99d-342d-4dea-8b28-271df0df9703-1">
        <Transforms>
            <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        </Transforms>
        <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
        <DigestValue>43xZllvfRz3QmOcPI2oMopJ6Z0U=</DigestValue>
        </Reference>
    </SignedInfo>
    <SignatureValue>hA6yVephrqRX1U0w==</SignatureValue>
    <KeyInfo>
        <o:SecurityTokenReference><o:Reference ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" URI="#uuid-7f91b027-5e8e-49e2-a949-9dc6a0401d65-2"/></o:SecurityTokenReference>
    </KeyInfo>
</Signature>
</o:Security>
</s:Header>

当他们要求我在 Header 之前插入 Assertion Header Security 标签时，我创建了一个这样的标签：

Saml2Assertion oAssertion = new Saml2Assertion(new Saml2NameIdentifier("MY"));
oAssertion.Subject = new Saml2Subject(new Saml2NameIdentifier("ident"));
Saml2Conditions asCondition = new Saml2Conditions();
asCondition.NotBefore = DateTime.Now;
asCondition.NotOnOrAfter = DateTime.Now.AddMinutes(15);
oAssertion.Conditions = asCondition;
Saml2AuthenticationStatement asAuthnStatement = new Saml2AuthenticationStatement(new Saml2AuthenticationContext());
oAssertion.Statements.Add(asAuthnStatement);

我想做的是使用 C# 代码插入在 Header 中创建的 Assertion，例如：

myBinding.Elements.Add(oAssertion);//Obviously this is an example that cannot work!

最后，我想得到一个这样的请求（主体已经通过调用 Wsdl 类创建）：

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Header>
    <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" saml:ID="identity-assertion" saml:IssueInstant="2018-12-18T13:03:19.885+0100" saml:Version="2.0" wsu:Id="identity-assertion" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:assertion saml-schema-assertion-2.0.xsd">
        <saml:Issuer>Company</saml:Issuer>
        <saml:Subject>
            <saml:NameID>02942630753</saml:NameID>
        </saml:Subject>
        <saml:Conditions NotBefore="2018-12-18T13:03:19.885+0100" NotOnOrAfter="2018-12-20T13:03:19.885+0100"/>
        <saml:AuthnStatement AuthnInstant="2018-12-18T13:03:19.885+0100">
            <saml:AuthnContext>
                <saml:AuthnContextDecl/>
                <saml:AuthenticatingAuthority/>
            </saml:AuthnContext>
        </saml:AuthnStatement>
        <saml:AttributeStatement/>
    </saml:Assertion>
    <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" saml:ID="authorization-assertion" saml:IssueInstant="2018-12-18T13:03:19.885+0100" saml:Version="2.0" wsu:Id="authorization-assertion" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:assertion saml-schema-assertion-2.0.xsd">
        <saml:Issuer/>
        <saml:Subject>
            <saml:NameID>02942630753</saml:NameID>
        </saml:Subject>
        <saml:Conditions NotBefore="2018-12-18T13:03:19.885+0100" NotOnOrAfter="2018-12-20T13:03:19.885+0100"/>
        <saml:AuthzDecisionStatement Decision="Permit" Resource="https://wsit-virtasl.rmmg.rsr.rupar.puglia.it:8181/aslba/IDocumentService">
            <saml:Action Namespace="http://www.sist.puglia.it/Schemas/PDD_SIST/SCATEL/FSE/">addDocument</saml:Action>
        </saml:AuthzDecisionStatement>
        <saml:AttributeStatement/>
    </saml:Assertion>
    <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" saml:ID="applicative-assertion" saml:IssueInstant="2018-12-18T13:03:19.885+0100" saml:Version="2.0" wsu:Id="applicative-assertion" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:assertion saml-schema-assertion-2.0.xsd">
        <saml:Issuer>Company</saml:Issuer>
        <saml:Subject>
            <saml:NameID>02942630753</saml:NameID>
        </saml:Subject>
        <saml:Conditions NotBefore="2018-12-18T13:03:19.885+0100" NotOnOrAfter="2018-12-20T13:03:19.885+0100"/>
        <saml:AuthnStatement AuthnInstant="2018-12-18T13:03:19.885+0100">
            <saml:AuthnContext>
                <saml:AuthnContextDecl/>
                <saml:AuthenticatingAuthority/>
            </saml:AuthnContext>
        </saml:AuthnStatement>
        <saml:AttributeStatement>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">APPNAME</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-vendor" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">CODICES</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-version" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">5</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-nonce" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">Lz40oj9kDP8pvM2EFdbk</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-digest" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">FjZuq3R5dkXIpAUL4+a2g0UGS/E=</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-created" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">2018-12-19T13:03:19.886</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:1.0:resource:resource-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">CLRERT68P01T556Y</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:1.0:action:action-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">C</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:1.0:subject:subject-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">02942630753</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:2.0:subject:role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">RIS000055</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:subject:organization-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">160000</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:subject:organization" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">SOFTWARE HOUSE EMITTENTE</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:resource:patient:consent" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">true</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:resource:patient:hl7:confidentiality-code" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">false</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:environment:locality" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">160000-SOFTWARE HOUSE EMITTENTE</saml:AttributeValue>
            </saml:Attribute>
        </saml:AttributeStatement>
    </saml:Assertion>
    <Action xmlns="http://www.w3.org/2005/08/addressing">http://www.openweb.com/Schemas/PDD_SIST/FSE/addDocument</Action>
    <MessageID xmlns="http://www.w3.org/2005/08/addressing">urn:uuid:556111ac-162d-4b27-8140-b5f558ff14b9</MessageID>
    <To xmlns="http://www.w3.org/2005/08/addressing">https://wsit-vrt.com:8081/DcSrv</To>
    <ReplyTo xmlns="http://www.w3.org/2005/08/addressing">
        <Address>http://www.w3.org/2005/08/addressing/anonymous</Address>
    </ReplyTo>
</soap:Header>
<soap:Body>
    <addDocument xmlns="http://www.openweb.com/Schemas/PDD_SIST/FSE/">
        <document>
            <document>++++++++++PC9hZG1pbmlzdHJhdGl2ZUdlbmRlYisbYxktjFzkfSLJiRYExMeKA46kAAAAAAAA=</document>
            <documentName>documentname</documentName>
            <status>Approved</status>
            <binaryDocument>++//3fuacM//YFIq7HgX/+13dQhABsdXTVCRDFFOTg0Pl0KICAvU2l6ZSAzMjgKPj4Kc3RhcnR4cmVmCjEwMzI2MgolJUVPRgo=</binaryDocument>
            <binaryName>filename.pdf</binaryName>
        </document>
    </addDocument>
</soap:Body>
</soap:Envelope>

我怎样才能做到这一点，使用 c# 代码？我的方法错了吗？我已经看到其他人和我有同样的问题，使用我自己的 Web 服务，但我没有找到任何有效的解决方案。谢谢你们。

标签： c#wcfsaml-2.0

解决方案

尝试

AddressHeader.CreateAddressHeader()

推荐阅读