71 lines
2.6 KiB
C#
71 lines
2.6 KiB
C#
|
//-----------------------------------------------------------------------------
|
||
|
|
// Copyright (c) Microsoft Corporation. All rights reserved.
|
||
|
|
//-----------------------------------------------------------------------------
|
||
|
|
namespace System.ServiceModel.ComIntegration
|
||
|
|
{
|
||
|
|
using System;
|
||
|
|
using System.IdentityModel.Claims;
|
||
|
|
using System.IdentityModel.Policy;
|
||
|
|
using System.Security.Permissions;
|
||
|
|
using System.Security.Principal;
|
||
|
|
using System.ServiceModel;
|
||
|
|
using System.ServiceModel.Channels;
|
||
|
|
using System.ServiceModel.Security;
|
||
|
|
using System.Transactions;
|
||
|
|
using System.ServiceModel.Transactions;
|
||
|
|
using System.ServiceModel.Diagnostics;
|
||
|
|
using System.EnterpriseServices;
|
||
|
|
|
||
|
|
static class MessageUtil
|
||
|
|
{
|
||
|
|
public static WindowsIdentity GetMessageIdentity(Message message)
|
||
|
|
{
|
||
|
|
WindowsIdentity callerIdentity = null;
|
||
|
|
|
||
|
|
SecurityMessageProperty securityProp;
|
||
|
|
securityProp = message.Properties.Security;
|
||
|
|
if (securityProp != null)
|
||
|
|
{
|
||
|
|
ServiceSecurityContext context;
|
||
|
|
context = securityProp.ServiceSecurityContext;
|
||
|
|
if (context != null)
|
||
|
|
{
|
||
|
|
if (context.WindowsIdentity == null)
|
||
|
|
{
|
||
|
|
throw DiagnosticUtility.ExceptionUtility.ThrowHelperError(Error.RequiresWindowsSecurity());
|
||
|
|
}
|
||
|
|
|
||
|
|
callerIdentity = context.WindowsIdentity;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if ((callerIdentity == null) || (callerIdentity.IsAnonymous))
|
||
|
|
{
|
||
|
|
// No security, no identity, must be anonymous.
|
||
|
|
callerIdentity = SecurityUtils.GetAnonymousIdentity();
|
||
|
|
}
|
||
|
|
|
||
|
|
return callerIdentity;
|
||
|
|
}
|
||
|
|
|
||
|
|
// The demand is not added now (in 4.5), to avoid a breaking change. To be considered in the next version.
|
||
|
|
/*
|
||
|
|
[PermissionSet(SecurityAction.Demand, Unrestricted = true)] // because we call code from a non-APTCA assembly; transactions are not supported in partial trust, so customers should not be broken by this demand
|
||
|
|
*/
|
||
|
|
public static Transaction GetMessageTransaction(Message message)
|
||
|
|
{
|
||
|
|
ServiceConfig serviceConfig = new ServiceConfig();
|
||
|
|
serviceConfig.Transaction = TransactionOption.Disabled;
|
||
|
|
ServiceDomain.Enter( serviceConfig );
|
||
|
|
try
|
||
|
|
{
|
||
|
|
return TransactionMessageProperty.TryGetTransaction(message);
|
||
|
|
}
|
||
|
|
finally
|
||
|
|
{
|
||
|
|
ServiceDomain.Leave();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|