WCF消息检查器
本文关键字:检查 消息 WCF | 更新日期: 2023-09-27 18:18:48
我需要基于WCF签署来自服务的xml回复
下面是示例代码:
public void BeforeSendReply(ref Message reply, object correlationState)
{
MemoryStream ms = new MemoryStream();
XmlDictionaryWriter writer = XmlDictionaryWriter.CreateTextWriter(ms, Encoding.UTF8);
reply.WriteMessage(writer);
writer.Flush();
ms.Seek(0, SeekOrigin.Begin);
XmlDocument doc = new XmlDocument();
doc.Load(ms);
doc.Save(@"C:'reply.xml");
ms.Seek(0, SeekOrigin.Begin);
CspParameters cspParams = new CspParameters();
cspParams.KeyContainerName = "XML_DSIG_RSA_KEY";
RSACryptoServiceProvider rsaKey = new RSACryptoServiceProvider(cspParams);
SignedXml signedXml = new SignedXml(doc);
signedXml.SigningKey = rsaKey;
Reference reference = new Reference();
reference.Uri = string.Empty;
XmlDsigEnvelopedSignatureTransform env = new XmlDsigEnvelopedSignatureTransform();
reference.AddTransform(env);
signedXml.AddReference(reference);
signedXml.ComputeSignature();
XmlElement xmlDigitalSignature = signedXml.GetXml();
doc.DocumentElement.AppendChild(doc.ImportNode(xmlDigitalSignature, true));
doc.Save(@"C:'signed_reply.xml");
MemoryStream signedStream = new MemoryStream();
doc.Save(signedStream);
signedStream.Seek(0, SeekOrigin.Begin);
XmlReader reader = XmlReader.Create(signedStream);
Message newMessage = Message.CreateMessage(reader, int.MaxValue, reply.Version);
newMessage.Properties.CopyProperties(reply.Properties);
reply = newMessage;
}
当使用SoapUI测试时,我什么也没看到,并且生成的客户端异常失败。当从变量ms返回时,一切都如预期的那样进行。这段代码可能有什么问题?
reply.xml
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
<s:Header>
<Action s:mustUnderstand="1" xmlns="http://schemas.microsoft.com/ws/2005/05/addressing/none">http://tempuri.org/ITest/GetProductResponse</Action>
</s:Header>
<s:Body>
<GetProductResponse xmlns="http://tempuri.org/">
<GetProductResult xmlns:a="http://schemas.datacontract.org/2004/07/WebJsonService" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<a:Description>test</a:Description>
<a:Id>5</a:Id>
<a:Name>test</a:Name>
<a:Price>0.25</a:Price>
</GetProductResult>
</GetProductResponse>
</s:Body>
</s:Envelope>
signed_reply.xml
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
<s:Header>
<Action s:mustUnderstand="1" xmlns="http://schemas.microsoft.com/ws/2005/05/addressing/none">http://tempuri.org/ITest/GetProductResponse</Action>
</s:Header>
<s:Body>
<GetProductResponse xmlns="http://tempuri.org/">
<GetProductResult xmlns:a="http://schemas.datacontract.org/2004/07/WebJsonService" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<a:Description>test</a:Description>
<a:Id>5</a:Id>
<a:Name>test</a:Name>
<a:Price>0.25</a:Price>
</GetProductResult>
</GetProductResponse>
</s:Body>
<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />
<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
<Reference URI="">
<Transforms>
<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
<DigestValue>fXEwGkEaeFkpQaxZr1T61l0q5XE=</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>eikY2sH9l12SyEiCwuEKBTqJZjKnkHND/8opBOp3uF0jkR/iYsAxFhDNuVXAghVsTbdllg+G8a/UKMN10JByvl5RV9wULM+5CLKQ2e1d3+0kBZdd5Q568yJNQhYbFENzJP2aRJiv9rWN8ji4QGdDITNy7IVcgv5M8flPr+5/9A8=</SignatureValue>
</Signature>
</s:Envelope>
可能更好的选择是使用WCF本身提供的安全服务。http://msdn.microsoft.com/en-us/library/ms789011.aspx