使用c#代码在标头中创建带有断言Saml2的SOAP消息_C#_Wcf_Saml 2.0

使用c#代码在标头中创建带有断言Saml2的SOAP消息

c# wcf

使用c#代码在标头中创建带有断言Saml2的SOAP消息,c#,wcf,saml-2.0,C#,Wcf,Saml 2.0,我有一个政府Web服务器，它有一个我需要使用的公开服务。到目前为止，对于同一Web服务器的其他服务，我已完成以下操作：我创建了一个CustomBinding，它创建了一个只有安全标签的头。代码如下： var sec = new AsymmetricSecurityBindingElement( new X509SecurityTokenParameters(X509KeyIdentifierClauseType.Any, SecurityTokenInclusion

我有一个政府Web服务器，它有一个我需要使用的公开服务。到目前为止，对于同一Web服务器的其他服务，我已完成以下操作：我创建了一个CustomBinding，它创建了一个只有安全标签的头。代码如下：

 var sec = new AsymmetricSecurityBindingElement(
            new X509SecurityTokenParameters(X509KeyIdentifierClauseType.Any, SecurityTokenInclusionMode.Never),
new X509SecurityTokenParameters(X509KeyIdentifierClauseType.Any, SecurityTokenInclusionMode.AlwaysToRecipient));
sec.MessageSecurityVersion = MessageSecurityVersion.WSSecurity10WSTrust13WSSecureConversation13WSSecurityPolicy12BasicSecurityProfile10;
sec.SecurityHeaderLayout = SecurityHeaderLayout.Strict;
sec.IncludeTimestamp = true;
sec.SetKeyDerivation(false);
sec.KeyEntropyMode = System.ServiceModel.Security.SecurityKeyEntropyMode.ServerEntropy;
sec.EnableUnsecuredResponse = true;              

CustomBinding myBinding = new CustomBinding();

myBinding.Elements.Add(sec);
myBinding.Elements.Add(new TextMessageEncodingBindingElement(MessageVersion.Soap11, Encoding.UTF8));
myBinding.Elements.Add(new HttpsTransportBindingElement());

这是CustomBinding（）获得的结果

我想使用C#代码插入在头中创建的断言，例如：

Saml2Assertion oAssertion = new Saml2Assertion(new Saml2NameIdentifier("MY"));
oAssertion.Subject = new Saml2Subject(new Saml2NameIdentifier("ident"));
Saml2Conditions asCondition = new Saml2Conditions();
asCondition.NotBefore = DateTime.Now;
asCondition.NotOnOrAfter = DateTime.Now.AddMinutes(15);
oAssertion.Conditions = asCondition;
Saml2AuthenticationStatement asAuthnStatement = new Saml2AuthenticationStatement(new Saml2AuthenticationContext());
oAssertion.Statements.Add(asAuthnStatement);

myBinding.Elements.Add(oAssertion);//Obviously this is an example that cannot work!

最后，我希望得到这样的请求（主体已经通过调用Wsdl类创建）：


单位
02942630753
02942630753
添加文档
单位
02942630753
APPNAME
抄本
5.
Lz40oj9kDP8pvM2EFdbk
FjZuq3R5dkXIpAUL4+a2g0UGS/E=
2018-12-19T13:03:19.886
CLERT68P01T556Y
C
02942630753
RIS000055
160000
Emittentent软件公司
真的
假的
160000-EMITTENTE软件公司
http://www.openweb.com/Schemas/PDD_SIST/FSE/addDocument
urn:uuid:556111ac-162d-4b27-8140-b5f558ff14b9
https://wsit-vrt.com:8081/DcSrv
http://www.w3.org/2005/08/addressing/anonymous
++++++++++PC9HZG1PBMLZDHJHDGL2ZUDLBMRYISBYXKTJFZKFSLJIRYEXMEKA46KAAAAAAA=
文件名
经核准的
++//3fuacM//YFIq7HgX/+13DQHABSDxtVCRDFFOTG0PL0KICAVU2L6ZSAZMJKPJ4KC3RHCNR4CMVMCJEWMZI2MGOLJUPRGO=
filename.pdf

如何使用c代码实现这一点？我是不是走错路了？我已经看到其他人和我有同样的问题，我自己的Web服务，但我没有找到任何有效的解决方案。谢谢大家。

试试看

AddressHeader.CreateAddressHeader()

您可以参考官方文档：SAML Token Provider（）来插入断言头。

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Header>
    <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" saml:ID="identity-assertion" saml:IssueInstant="2018-12-18T13:03:19.885+0100" saml:Version="2.0" wsu:Id="identity-assertion" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:assertion saml-schema-assertion-2.0.xsd">
        <saml:Issuer>Company</saml:Issuer>
        <saml:Subject>
            <saml:NameID>02942630753</saml:NameID>
        </saml:Subject>
        <saml:Conditions NotBefore="2018-12-18T13:03:19.885+0100" NotOnOrAfter="2018-12-20T13:03:19.885+0100"/>
        <saml:AuthnStatement AuthnInstant="2018-12-18T13:03:19.885+0100">
            <saml:AuthnContext>
                <saml:AuthnContextDecl/>
                <saml:AuthenticatingAuthority/>
            </saml:AuthnContext>
        </saml:AuthnStatement>
        <saml:AttributeStatement/>
    </saml:Assertion>
    <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" saml:ID="authorization-assertion" saml:IssueInstant="2018-12-18T13:03:19.885+0100" saml:Version="2.0" wsu:Id="authorization-assertion" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:assertion saml-schema-assertion-2.0.xsd">
        <saml:Issuer/>
        <saml:Subject>
            <saml:NameID>02942630753</saml:NameID>
        </saml:Subject>
        <saml:Conditions NotBefore="2018-12-18T13:03:19.885+0100" NotOnOrAfter="2018-12-20T13:03:19.885+0100"/>
        <saml:AuthzDecisionStatement Decision="Permit" Resource="https://wsit-virtasl.rmmg.rsr.rupar.puglia.it:8181/aslba/IDocumentService">
            <saml:Action Namespace="http://www.sist.puglia.it/Schemas/PDD_SIST/SCATEL/FSE/">addDocument</saml:Action>
        </saml:AuthzDecisionStatement>
        <saml:AttributeStatement/>
    </saml:Assertion>
    <saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" saml:ID="applicative-assertion" saml:IssueInstant="2018-12-18T13:03:19.885+0100" saml:Version="2.0" wsu:Id="applicative-assertion" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:assertion saml-schema-assertion-2.0.xsd">
        <saml:Issuer>Company</saml:Issuer>
        <saml:Subject>
            <saml:NameID>02942630753</saml:NameID>
        </saml:Subject>
        <saml:Conditions NotBefore="2018-12-18T13:03:19.885+0100" NotOnOrAfter="2018-12-20T13:03:19.885+0100"/>
        <saml:AuthnStatement AuthnInstant="2018-12-18T13:03:19.885+0100">
            <saml:AuthnContext>
                <saml:AuthnContextDecl/>
                <saml:AuthenticatingAuthority/>
            </saml:AuthnContext>
        </saml:AuthnStatement>
        <saml:AttributeStatement>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">APPNAME</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-vendor" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">CODICES</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-version" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">5</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-nonce" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">Lz40oj9kDP8pvM2EFdbk</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-digest" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">FjZuq3R5dkXIpAUL4+a2g0UGS/E=</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:sist:1.0:subject:subject-application-created" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">2018-12-19T13:03:19.886</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:1.0:resource:resource-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">CLRERT68P01T556Y</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:1.0:action:action-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">C</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:1.0:subject:subject-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">02942630753</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xacml:2.0:subject:role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">RIS000055</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:subject:organization-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">160000</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:subject:organization" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">SOFTWARE HOUSE EMITTENTE</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:resource:patient:consent" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">true</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:resource:patient:hl7:confidentiality-code" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">false</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:xspa:1.0:environment:locality" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue xsi:type="xs:string">160000-SOFTWARE HOUSE EMITTENTE</saml:AttributeValue>
            </saml:Attribute>
        </saml:AttributeStatement>
    </saml:Assertion>
    <Action xmlns="http://www.w3.org/2005/08/addressing">http://www.openweb.com/Schemas/PDD_SIST/FSE/addDocument</Action>
    <MessageID xmlns="http://www.w3.org/2005/08/addressing">urn:uuid:556111ac-162d-4b27-8140-b5f558ff14b9</MessageID>
    <To xmlns="http://www.w3.org/2005/08/addressing">https://wsit-vrt.com:8081/DcSrv</To>
    <ReplyTo xmlns="http://www.w3.org/2005/08/addressing">
        <Address>http://www.w3.org/2005/08/addressing/anonymous</Address>
    </ReplyTo>
</soap:Header>
<soap:Body>
    <addDocument xmlns="http://www.openweb.com/Schemas/PDD_SIST/FSE/">
        <document>
            <document>++++++++++PC9hZG1pbmlzdHJhdGl2ZUdlbmRlYisbYxktjFzkfSLJiRYExMeKA46kAAAAAAAA=</document>
            <documentName>documentname</documentName>
            <status>Approved</status>
            <binaryDocument>++//3fuacM//YFIq7HgX/+13dQhABsdXTVCRDFFOTg0Pl0KICAvU2l6ZSAzMjgKPj4Kc3RhcnR4cmVmCjEwMzI2MgolJUVPRgo=</binaryDocument>
            <binaryName>filename.pdf</binaryName>
        </document>
    </addDocument>
</soap:Body>
</soap:Envelope>

AddressHeader.CreateAddressHeader()