1. 技术文章
  2. Create a SOAP message with Assertion Saml2 in Header with c# code

Create a SOAP message with Assertion Saml2 in Header with c# code

由 倖福魔咒の 提交于 2020-12-10 13:25:08

问题


I have a Government Web Server with an exposed service that I need to consume. So far, for other services of the same Web Server I have done this: I created a CustomBinding, which creates a Header with only the Security tag. This is the code:

 var sec = new AsymmetricSecurityBindingElement(
            new X509SecurityTokenParameters(X509KeyIdentifierClauseType.Any, SecurityTokenInclusionMode.Never),
new X509SecurityTokenParameters(X509KeyIdentifierClauseType.Any, SecurityTokenInclusionMode.AlwaysToRecipient));
sec.MessageSecurityVersion = MessageSecurityVersion.WSSecurity10WSTrust13WSSecureConversation13WSSecurityPolicy12BasicSecurityProfile10;
sec.SecurityHeaderLayout = SecurityHeaderLayout.Strict;
sec.IncludeTimestamp = true;
sec.SetKeyDerivation(false);
sec.KeyEntropyMode = System.ServiceModel.Security.SecurityKeyEntropyMode.ServerEntropy;
sec.EnableUnsecuredResponse = true;              

CustomBinding myBinding = new CustomBinding();

myBinding.Elements.Add(sec);
myBinding.Elements.Add(new TextMessageEncodingBindingElement(MessageVersion.Soap11, Encoding.UTF8));
myBinding.Elements.Add(new HttpsTransportBindingElement());

This is the result obtained by the CustomBinding();

<s:Header><VsDebuggerCausalityData xmlns="http://schemas.microsoft.com/vstudio/diagnostics/servicemodelsink">uIDPowknFB+N96ZEtO/wdI2E9acAAAAAcJdp/1Hm1EmYTKrs1mDzIDxAUSKqP+BEuW7DUbd1RNIACQAA</VsDebuggerCausalityData>
<o:Security s:mustUnderstand="1" xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
    <u:Timestamp u:Id="uuid-a770c99d-342d-4dea-8b28-271df0df9703-1">
        <u:Created>2020-11-14T09:48:00.479Z</u:Created>
        <u:Expires>2020-11-14T09:53:00.479Z</u:Expires>
    </u:Timestamp>
<o:BinarySecurityToken u:Id="uuid-7f91b027-5e8e-49e2-a949-9dc6a0401d65-2" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">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
</o:BinarySecurityToken>
<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
    <SignedInfo>
        <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
        <Reference URI="#uuid-a770c99d-342d-4dea-8b28-271df0df9703-1">
        <Transforms>
            <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        </Transforms>
        <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
        <DigestValue>43xZllvfRz3QmOcPI2oMopJ6Z0U=</DigestValue>
        </Reference>
    </SignedInfo>
    <SignatureValue>hA6yVephrqRX1U0w==</SignatureValue>
    <KeyInfo>
        <o:SecurityTokenReference><o:Reference ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" URI="#uuid-7f91b027-5e8e-49e2-a949-9dc6a0401d65-2"/></o:SecurityTokenReference>
    </KeyInfo>
</Signature>
</o:Security>
</s:Header>

As they asked me to insert the Assertion Header Security tag before the Header, I created one like this:

Saml2Assertion oAssertion = new Saml2Assertion(new Saml2NameIdentifier("MY"));
oAssertion.Subject = new Saml2Subject(new Saml2NameIdentifier("ident"));
Saml2Conditions asCondition = new Saml2Conditions();
asCondition.NotBefore = DateTime.Now;
asCondition.NotOnOrAfter = DateTime.Now.AddMinutes(15);
oAssertion.Conditions = asCondition;
Saml2AuthenticationStatement asAuthnStatement = new Saml2AuthenticationStatement(new Saml2AuthenticationContext());
oAssertion.Statements.Add(asAuthnStatement);

What I would like to do, using C # code, is to insert the Assertion created in the Header, for example like this:

myBinding.Elements.Add(oAssertion);//Obviously this is an example that cannot work!

At the end of it all I would like to get a Request like this (The body is already created by calling the Wsdl class):

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Header>
    <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" saml:ID="identity-assertion" saml:IssueInstant="2018-12-18T13:03:19.885+0100" saml:Version="2.0" wsu:Id="identity-assertion" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:assertion saml-schema-assertion-2.0.xsd">
        <saml:Issuer>Company</saml:Issuer>
        <saml:Subject>
            <saml:NameID>02942630753</saml:NameID>
        </saml:Subject>
        <saml:Conditions NotBefore="2018-12-18T13:03:19.885+0100" NotOnOrAfter="2018-12-20T13:03:19.885+0100"/>
        <saml:AuthnStatement AuthnInstant="2018-12-18T13:03:19.885+0100">
            <saml:AuthnContext>
                <saml:AuthnContextDecl/>
                <saml:AuthenticatingAuthority/>
            </saml:AuthnContext>
        </saml:AuthnStatement>
        <saml:AttributeStatement/>
    </saml:Assertion>
    <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" saml:ID="authorization-assertion" saml:IssueInstant="2018-12-18T13:03:19.885+0100" saml:Version="2.0" wsu:Id="authorization-assertion" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:assertion saml-schema-assertion-2.0.xsd">
        <saml:Issuer/>
        <saml:Subject>
            <saml:NameID>02942630753</saml:NameID>
        </saml:Subject>
        <saml:Conditions NotBefore="2018-12-18T13:03:19.885+0100" NotOnOrAfter="2018-12-20T13:03:19.885+0100"/>
        <saml:AuthzDecisionStatement Decision="Permit" Resource="https://wsit-virtasl.rmmg.rsr.rupar.puglia.it:8181/aslba/IDocumentService">
            <saml:Action Namespace="http://www.sist.puglia.it/Schemas/PDD_SIST/SCATEL/FSE/">addDocument</saml:Action>
        </saml:AuthzDecisionStatement>
        <saml:AttributeStatement/>
    </saml:Assertion>
    <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" saml:ID="applicative-assertion" saml:IssueInstant="2018-12-18T13:03:19.885+0100" saml:Version="2.0" wsu:Id="applicative-assertion" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:assertion saml-schema-assertion-2.0.xsd">
        <saml:Issuer>Company</saml:Issuer>
        <saml:Subject>
            <saml:NameID>02942630753</saml:NameID>
        </saml:Subject>
        <saml:Conditions NotBefore="2018-12-18T13:03:19.885+0100" NotOnOrAfter="2018-12-20T13:03:19.885+0100"/>
        <saml:AuthnStatement AuthnInstant="2018-12-18T13:03:19.885+0100">
            <saml:AuthnContext>
                <saml:AuthnContextDecl/>
                <saml:AuthenticatingAuthority/>
            </saml:AuthnContext>
        </saml:AuthnStatement>
        <saml:AttributeStatement>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">APPNAME</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-vendor" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">CODICES</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-version" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">5</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-nonce" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">Lz40oj9kDP8pvM2EFdbk</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-digest" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">FjZuq3R5dkXIpAUL4+a2g0UGS/E=</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-created" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">2018-12-19T13:03:19.886</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:1.0:resource:resource-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">CLRERT68P01T556Y</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:1.0:action:action-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">C</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:1.0:subject:subject-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">02942630753</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:2.0:subject:role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">RIS000055</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:subject:organization-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">160000</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:subject:organization" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">SOFTWARE HOUSE EMITTENTE</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:resource:patient:consent" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">true</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:resource:patient:hl7:confidentiality-code" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">false</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:environment:locality" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">160000-SOFTWARE HOUSE EMITTENTE</saml:AttributeValue>
            </saml:Attribute>
        </saml:AttributeStatement>
    </saml:Assertion>
    <Action xmlns="http://www.w3.org/2005/08/addressing">http://www.openweb.com/Schemas/PDD_SIST/FSE/addDocument</Action>
    <MessageID xmlns="http://www.w3.org/2005/08/addressing">urn:uuid:556111ac-162d-4b27-8140-b5f558ff14b9</MessageID>
    <To xmlns="http://www.w3.org/2005/08/addressing">https://wsit-vrt.com:8081/DcSrv</To>
    <ReplyTo xmlns="http://www.w3.org/2005/08/addressing">
        <Address>http://www.w3.org/2005/08/addressing/anonymous</Address>
    </ReplyTo>
</soap:Header>
<soap:Body>
    <addDocument xmlns="http://www.openweb.com/Schemas/PDD_SIST/FSE/">
        <document>
            <document>++++++++++PC9hZG1pbmlzdHJhdGl2ZUdlbmRlYisbYxktjFzkfSLJiRYExMeKA46kAAAAAAAA=</document>
            <documentName>documentname</documentName>
            <status>Approved</status>
            <binaryDocument>++//3fuacM//YFIq7HgX/+13dQhABsdXTVCRDFFOTg0Pl0KICAvU2l6ZSAzMjgKPj4Kc3RhcnR4cmVmCjEwMzI2MgolJUVPRgo=</binaryDocument>
            <binaryName>filename.pdf</binaryName>
        </document>
    </addDocument>
</soap:Body>
</soap:Envelope>

How can I accomplish this, using the c# code? Am I getting the approach wrong? I have seen that others have the same problem as me, with my own Web Service, but I have not found any valid solution. Thank you all.


回答1:


Try

AddressHeader.CreateAddressHeader()


来源：https://stackoverflow.com/questions/64875098/create-a-soap-message-with-assertion-saml2-in-header-with-c-sharp-code

标签
c#
wcf
saml-2.0
易学教程内所有资源均来自网络或用户发布的内容，如有违反法律规定的内容欢迎反馈！
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!