首页 > 代码库 > 实现webservice过滤器,请求日志和权限等
实现webservice过滤器,请求日志和权限等
过滤webservice的请求日志,做权限验证功能等。
1.
namespace WebApplication1 { public class SimpleWSInvokeMonitorExtension : SoapExtension { Stopwatch stopWatch = null; string startLoginfo = ""; public override Stream ChainStream(Stream stream) { return stream; } public override object GetInitializer(Type serviceType) { //throw new NotImplementedException(); return null; } public override object GetInitializer(LogicalMethodInfo methodInfo, SoapExtensionAttribute attribute) { //throw new NotImplementedException(); return null; } public override void Initialize(object initializer) { //throw new NotImplementedException(); } public override void ProcessMessage(SoapMessage message) { switch (message.Stage) { case SoapMessageStage.BeforeSerialize: break; case SoapMessageStage.AfterSerialize: stopWatch.Stop(); var sec = stopWatch.ElapsedMilliseconds; string endLogInfo = string.Format("{0},总花费时间{1}ms,请求ip{2}", startLoginfo, stopWatch.ElapsedMilliseconds.ToString(), GetClientIp()); break; case SoapMessageStage.BeforeDeserialize: break; //about to call method; case SoapMessageStage.AfterDeserialize: CertficateSoap(message); string soapMessage = string.Empty; var stream = message.Stream; // Just making sure again that we have got a stream which we // can read from AND after reading reset its position //------------------------------------------------------------ if (stream.CanRead && stream.CanSeek && stream.Length < 10 * 1024 * 1024) { stream.Position = 0; StreamReader rdr = new StreamReader(stream); soapMessage = rdr.ReadToEnd(); // IMPORTANT!! - Set the position back to zero on the original // stream so that HTTP pipeline can now process it //------------------------------------------------------------ stream.Position = 0; } startLoginfo = GetStartLogInfo(soapMessage, message.MethodInfo.Name); //采集时间 stopWatch = new Stopwatch(); stopWatch.Start(); break; } } /// <summary> /// 权限验证 /// </summary> /// <param name="message"></param> public void CertficateSoap(SoapMessage message) { if (message.MethodInfo.CustomAttributeProvider.IsDefined(typeof(AllAnonymous), false)) return; bool check = false; foreach (SoapHeader header in message.Headers) { if (header is CertficateSoapHeader) { CertficateSoapHeader myHeader = (CertficateSoapHeader)header; if (myHeader.UserName == null || myHeader.PassWord == null) { break; } if (myHeader.UserName.Equals("LY") && myHeader.PassWord.Equals("LY")) { check = true; break; } } } if (!check) { throw new SoapHeaderException(string.Format("认证失败{0}", message.MethodInfo.Name), SoapException.ClientFaultCode); } } public string GetStartLogInfo(string soapMessage, string methodName) { XDocument doc = XDocument.Parse(soapMessage); var body = doc.Descendants().Where(p => p.Name.LocalName == methodName).First(); StringBuilder sb = new StringBuilder(); foreach (XElement el in body.Nodes()) { sb.Append(string.Format("{0}:{1},", el.Name.LocalName, el.Value)); } string strLog = string.Format("外部系统请求方法:开始时间{0},方法{1},参数{2}", DateTime.Now.ToString(), methodName, sb.ToString()); return strLog; } private static string GetClientIp(string ip = null) { if (String.IsNullOrEmpty(ip)) { ip = HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED_FOR"]; } if (String.IsNullOrEmpty(ip) || ip.Equals("unknown", StringComparison.OrdinalIgnoreCase)) { ip = HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"]; } if (ip == "::1") ip = "127.0.0.1"; return ip; } } }
2.在服务端的公开方法增加特性
/// <summary> /// BotWebService 的摘要说明 /// </summary> [WebService(Namespace = "http://tempuri.org/")] [WebServiceBinding(ConformsTo = WsiProfiles.BasicProfile1_1)] //[ExtensionAttribute] [ToolboxItem(false)] // 若要允许使用 ASP.NET AJAX 从脚本中调用此 Web 服务,请取消对下行的注释。 // [System.Web.Script.Services.ScriptService] public class BotWebService : System.Web.Services.WebService { public CertficateSoapHeader soapHeader; [WebMethod(Description = "")] [SoapHeader("soapHeader", Direction = SoapHeaderDirection.In)] //[AllAnonymous] 有特性表示不需要验证权限,没就需要 public string GetString(string name,int age,byte[] remark,bool isfalg) { return name + age; } }
3.
/// <summary> /// 该特性表示该方法不需要验证调用者的信息 /// </summary> [AttributeUsage(AttributeTargets.Method,AllowMultiple = true,Inherited = false)] public class AllAnonymous:Attribute { }
4.
namespace WebApplication1 { /// <summary> /// 用于webservice认证 /// </summary> public class CertficateSoapHeader : SoapHeader { /// <summary> /// 属性 /// </summary> public string UserName { get; set; } public string PassWord { get; set; } public CertficateSoapHeader() { } /// <summary> /// 构造函数认证 /// </summary> /// <param name="userName">用户名</param> /// <param name="passWord">密码</param> public CertficateSoapHeader(string userName, string passWord) { this.UserName = userName; this.PassWord = passWord; } } }
5.client
class Program { static void Main(string[] args) { localhost.BotWebService s = new localhost.BotWebService(); localhost.CertficateSoapHeader header = new localhost.CertficateSoapHeader(); header.UserName = "LY"; header.PassWord = "LY"; s.CertficateSoapHeaderValue = header; var by = Encoding.UTF8.GetBytes("你好啊,ewqeqwewq"); //Console.WriteLine(s.HelloWorld()); Console.WriteLine(s.GetString("111", 1,by,true)); Console.ReadKey(); } } }
6.web.config配置
<system.web> <webServices> <soapExtensionTypes> <add type="WebApplication1.SimpleWSInvokeMonitorExtension,WebApplication1" priority="1"/> </soapExtensionTypes> </webServices> </system.web>
实现webservice过滤器,请求日志和权限等
声明:以上内容来自用户投稿及互联网公开渠道收集整理发布,本网站不拥有所有权,未作人工编辑处理,也不承担相关法律责任,若内容有误或涉及侵权可进行投诉: 投诉/举报 工作人员会在5个工作日内联系你,一经查实,本站将立刻删除涉嫌侵权内容。