如何更改 SessionSecurityToken 类中的 SecureConversationVersion 属性答案

【问题标题】：How to change SecureConversationVersion property in SessionSecurityToken class如何更改 SessionSecurityToken 类中的 SecureConversationVersion 属性
【发布时间】：2014-06-02 12:39:44
【问题描述】：

我正在尝试使用 WCF 配置安全令牌服务，以便它可以使用 WSSecureConversationFebruary2005 命名空间创建令牌 (SessionSecurityToken)。 SessionSecurityToken 类具有属性 SecureConversationVersion 理论上可以设置为我想要的值。不幸的是，默认情况下它不是，我看不到改变它的方法。在分析了源代码后，我注意到有一个构造函数可以改变这个值，但它是内部的。

http://msdn.microsoft.com/pl-pl/library/system.identitymodel.tokens.sessionsecuritytoken.secureconversationversion%28v=vs.110%29.aspx

我用于托管 STS 的代码如下所示：

                BindingElementCollection bindings = new BindingElementCollection();
                SecurityBindingElement security = SecurityBindingElement.CreateUserNameOverTransportBindingElement();
                security.AllowInsecureTransport = true;
                security.EnableUnsecuredResponse = true;
                security.MessageSecurityVersion = MessageSecurityVersion.WSSecurity11WSTrustFebruary2005WSSecureConversationFebruary2005WSSecurityPolicy11BasicSecurityProfile10;
                bindings.Add(security);

                TextMessageEncodingBindingElement textMessageEncoding = new TextMessageEncodingBindingElement();
                bindings.Add(textMessageEncoding);
                textMessageEncoding.MessageVersion = MessageVersion.Soap11WSAddressingAugust2004;

                HttpTransportBindingElement httpsTransport = new HttpTransportBindingElement();
                bindings.Add(httpsTransport);
                var myBinding = new CustomBinding(bindings);

                var host = new WSTrustServiceHost(Configuration, new Uri(BaseAddress));
                host.AddServiceEndpoint(
                    typeof(IWSTrustFeb2005SyncContract),
                    myBinding,
                    STS_ADDRESS);

示例响应如下所示：

<t:RequestedSecurityToken>
<SecurityContextToken d6p1:Id="_6d497e66-9851-4b74-bf6d-e5f46c652837-35820CA1B23B6109FC1DC2F6A0D3ACC3" 
xmlns:d6p1="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" 
xmlns="http://docs.oasis-open.org/ws-sx/ws-secureconversation/200512">
<Identifier>urn:uuid:b067f4fc-0adc-4e78-98a5-449c6b58c234</Identifier>
<Cookie xmlns="http://schemas.microsoft.com/ws/2006/05/security"></Cookie>
</SecurityContextToken>
</t:RequestedSecurityToken>

但我希望使用 schemas.xmlsoap.org/ws/2005/02/sc 而不是 docs.oasis-open.org/ws-sx/ws-secureconversation/200512

【问题讨论】：

标签： c# wcf

【解决方案1】：

最后，我能够通过创建覆盖 WriteToken 方法的自定义令牌处理程序来实现我的目标。该实现是基类的略微修改版本，如下所示：

public class MyTokenHandler : SessionSecurityTokenHandler
{
    public override void WriteToken(XmlWriter writer, SecurityToken token)
    {
        SessionSecurityToken sessionSecurityToken = token as SessionSecurityToken;
        sessionSecurityToken.IsReferenceMode = true;
        string ns = "http://schemas.xmlsoap.org/ws/2005/02/sc";
        string localName = "SecurityContextToken";
        string localName2 = "Identifier";

        XmlDictionaryWriter xmlDictionaryWriter;

        if (writer is XmlDictionaryWriter)
        {
            xmlDictionaryWriter = (XmlDictionaryWriter)writer;
        }
        else
        {
            xmlDictionaryWriter = XmlDictionaryWriter.CreateDictionaryWriter(writer);
        }

        xmlDictionaryWriter.WriteStartElement(localName, ns);
        xmlDictionaryWriter.WriteElementString(localName2, ns, sessionSecurityToken.ContextId.ToString());
        xmlDictionaryWriter.WriteEndElement();
        xmlDictionaryWriter.Flush();
    }
}

这可能不是最优雅的解决方案，但我找不到更好的解决方案。

【讨论】：