コード例 #1
0
        /// <summary>
        /// This gets called on the STS to serialize the token
        /// The token looks like this
        ///     <MyDecisionToken Id="someId here">
        ///         <Decision>True</Decision>
        ///         <Key>key bytes</Key>
        ///         <Signature>...</Signature>
        ///     </MyDecisionToken>
        /// </summary>
        /// <param name="writer">The xml writer.</param>
        /// <param name="token">The security token that will be written.</param>
        /// <exception cref="ArgumentException">When the token is null.</exception>
        public override void WriteToken(XmlWriter writer, SecurityToken token)
        {
            Console.WriteLine("CustomTokenHandler.WriteToken called");
            MyDecisionToken decisionToken = token as MyDecisionToken;

            if (decisionToken == null)
            {
                throw new ArgumentException("The given token must be a MyDecisionToken", "token");
            }

            EnvelopedSignatureWriter envWriter = new EnvelopedSignatureWriter(writer, decisionToken.SigningCredentials, decisionToken.Id, WSSecurityTokenSerializer.DefaultInstance);

            // Start the tokenName
            envWriter.WriteStartElement(TokenName, TokenNamespace);
            envWriter.WriteAttributeString(Id, token.Id);

            // Write the decision element
            Console.WriteLine("- decision being written: {0}", decisionToken.Decision);
            envWriter.WriteElementString(Decision, TokenNamespace, Convert.ToString(decisionToken.Decision));

            // Write the key
            envWriter.WriteElementString(Key, TokenNamespace, Convert.ToBase64String(((MyDecisionToken)token).RetrieveKeyBytes()));

            // Close the TokenName element
            envWriter.WriteEndElement();
        }
コード例 #2
0
        /// <summary>
        /// Creates a MyDecision type security token based on the description in the security token descriptor.
        /// </summary>
        /// <param name="tokenDescriptor">The token descriptor.</param>
        /// <returns>The security token.</returns>
        public override SecurityToken CreateToken(SecurityTokenDescriptor tokenDescriptor)
        {
            Console.WriteLine("CustomTokenHandler.CreateToken called");
            SymmetricProofDescriptor symmetric = tokenDescriptor.Proof as SymmetricProofDescriptor;

            if (symmetric == null)
            {
                throw new InvalidOperationException("The MyDecisionToken must be symmetric key based.");
            }

            bool decision = false;

            //
            // Retrieve the decision from the issued claims
            //
            foreach (Claim claim in tokenDescriptor.Subject.Claims)
            {
                if (StringComparer.Ordinal.Equals(claim.ClaimType, DecisionClaimType) &&
                    StringComparer.Ordinal.Equals(claim.ValueType, ClaimValueTypes.Boolean))
                {
                    Console.WriteLine("- decision claim found: {0}", claim.Value);
                    decision = Convert.ToBoolean(claim.Value);
                }
            }

            //
            // This is just an example to show how to issue a custom token. The key is created by the STS
            // through the proof token.
            //
            SecurityToken token = new MyDecisionToken(decision, tokenDescriptor.SigningCredentials, symmetric.GetKeyBytes());

            //
            // Encrypt the token
            //
            EncryptingCredentials encryptingCredentials = GetEncryptingCredentials(tokenDescriptor);

            if (encryptingCredentials != null)
            {
                token = new EncryptedSecurityToken(token, encryptingCredentials);
            }

            return(token);
        }