public NegotiationHost(NegotiationTokenAuthenticator <T> authenticator, Uri listenUri, ChannelBuilder channelBuilder, MessageFilter listenerFilter)
{
this.authenticator = authenticator;
this.listenUri = listenUri;
this.channelBuilder = channelBuilder;
this.listenerFilter = listenerFilter;
}
internal NegotiationSyncInvoker(NegotiationTokenAuthenticator <T> parent)
{
this.parent = parent;
}
private Message ProcessRequestCore(Message request)
{
Message message;
if (request == null)
{
throw DiagnosticUtility.ExceptionUtility.ThrowHelperArgumentNull("request");
}
RequestSecurityToken requestSecurityToken = null;
RequestSecurityTokenResponse requestSecurityTokenResponse = null;
string context = null;
bool flag = false;
bool flag2 = true;
T negotiationState = default(T);
try
{
if (this.maxMessageSize < 0x7fffffff)
{
string action = request.Headers.Action;
try
{
using (MessageBuffer buffer = request.CreateBufferedCopy(this.maxMessageSize))
{
request = buffer.CreateMessage();
flag = true;
}
}
catch (QuotaExceededException exception)
{
throw DiagnosticUtility.ExceptionUtility.ThrowHelperError(new SecurityNegotiationException(System.ServiceModel.SR.GetString("SecurityNegotiationMessageTooLarge", new object[] { action, this.maxMessageSize }), exception));
}
}
try
{
BodyWriter writer;
Uri to = request.Headers.To;
this.ParseMessageBody(request, out context, out requestSecurityToken, out requestSecurityTokenResponse);
if (context != null)
{
negotiationState = this.stateCache.GetState(context);
}
else
{
negotiationState = default(T);
}
bool flag3 = false;
try
{
if (requestSecurityToken != null)
{
if (negotiationState != null)
{
throw DiagnosticUtility.ExceptionUtility.ThrowHelperWarning(new SecurityNegotiationException(System.ServiceModel.SR.GetString("NegotiationStateAlreadyPresent", new object[] { context })));
}
writer = this.ProcessRequestSecurityToken(request, requestSecurityToken, out negotiationState);
lock (negotiationState.ThisLock)
{
if (negotiationState.IsNegotiationCompleted)
{
if (!negotiationState.ServiceToken.IsCookieMode)
{
this.IssuedTokenCache.AddContext(negotiationState.ServiceToken);
}
this.OnTokenIssued(negotiationState.ServiceToken);
SecurityTraceRecordHelper.TraceServiceSecurityNegotiationCompleted <T>((NegotiationTokenAuthenticator <T>) this, negotiationState.ServiceToken);
flag3 = true;
}
else
{
this.stateCache.AddState(context, negotiationState);
flag3 = false;
}
this.AddNegotiationChannelForIdleTracking();
goto Label_0299;
}
}
if (negotiationState == null)
{
throw DiagnosticUtility.ExceptionUtility.ThrowHelperWarning(new SecurityNegotiationException(System.ServiceModel.SR.GetString("CannotFindNegotiationState", new object[] { context })));
}
lock (negotiationState.ThisLock)
{
writer = this.ProcessRequestSecurityTokenResponse(negotiationState, request, requestSecurityTokenResponse);
if (negotiationState.IsNegotiationCompleted)
{
if (!negotiationState.ServiceToken.IsCookieMode)
{
this.IssuedTokenCache.AddContext(negotiationState.ServiceToken);
}
this.OnTokenIssued(negotiationState.ServiceToken);
SecurityTraceRecordHelper.TraceServiceSecurityNegotiationCompleted <T>((NegotiationTokenAuthenticator <T>) this, negotiationState.ServiceToken);
flag3 = true;
}
else
{
flag3 = false;
}
}
Label_0299:
if ((negotiationState.IsNegotiationCompleted && (null != this.ListenUri)) && (AuditLevel.Success == (this.messageAuthenticationAuditLevel & AuditLevel.Success)))
{
string remoteIdentityName = negotiationState.GetRemoteIdentityName();
SecurityAuditHelper.WriteSecurityNegotiationSuccessEvent(this.auditLogLocation, this.suppressAuditFailure, request, request.Headers.To, request.Headers.Action, remoteIdentityName, base.GetType().Name);
}
flag2 = false;
}
catch (Exception exception2)
{
if (Fx.IsFatal(exception2))
{
throw;
}
if (PerformanceCounters.PerformanceCountersEnabled && (null != this.ListenUri))
{
PerformanceCounters.AuthenticationFailed(request, this.ListenUri);
}
if (AuditLevel.Failure == (this.messageAuthenticationAuditLevel & AuditLevel.Failure))
{
try
{
string clientIdentity = (negotiationState != null) ? negotiationState.GetRemoteIdentityName() : string.Empty;
SecurityAuditHelper.WriteSecurityNegotiationFailureEvent(this.auditLogLocation, this.suppressAuditFailure, request, request.Headers.To, request.Headers.Action, clientIdentity, base.GetType().Name, exception2);
}
catch (Exception exception3)
{
if (Fx.IsFatal(exception3))
{
throw;
}
DiagnosticUtility.ExceptionUtility.TraceHandledException(exception3, TraceEventType.Error);
}
}
flag3 = true;
throw;
}
finally
{
if (flag3 && (negotiationState != null))
{
if (context != null)
{
this.stateCache.RemoveState(context);
}
negotiationState.Dispose();
}
}
return(NegotiationTokenAuthenticator <T> .CreateReply(request, (writer is RequestSecurityTokenResponseCollection)?this.RequestSecurityTokenResponseFinalAction : this.RequestSecurityTokenResponseAction, writer));
}
finally
{
if (flag)
{
request.Close();
}
}
}
finally
{
if (flag2)
{
this.AddNegotiationChannelForIdleTracking();
}
else if ((negotiationState != null) && negotiationState.IsNegotiationCompleted)
{
this.RemoveNegotiationChannelFromIdleTracking();
}
}
return(message);
}
