HttpClient CreateClient(ClientOptions options)
{
var handler = new HawkValidationHandler(options);
var client = HttpClientFactory.Create(handler);
client.Timeout = new TimeSpan(500);
client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("text/xml"));
return(client);
}
static void Main(string[] args)
{
string uri = "http://localhost:12345/values";
var credential = new Credential()
{
Id = "dh37fgj492je",
Algorithm = SupportedAlgorithms.SHA256,
User = "******",
Key = Convert.FromBase64String("wBgvhp1lZTr4Tb6K6+5OQa1bL9fxK7j8wBsepjqVNiQ=")
};
// GET and POST using the Authorization header
var options = new ClientOptions()
{
CredentialsCallback = () => credential,
RequestPayloadHashabilityCallback = (r) => true,
NormalizationCallback = (req) =>
{
string name = "X-Request-Header-To-Protect";
return(req.Headers.ContainsKey(name) ?
name + ":" + req.Headers[name].First() : null);
}
};
var handler = new HawkValidationHandler(options);
HttpClient client = HttpClientFactory.Create(handler);
client.DefaultRequestHeaders.Add("X-Request-Header-To-Protect", "secret");
var response = client.GetAsync(uri).Result;
Console.WriteLine(response.Content.ReadAsStringAsync().Result);
response = client.PostAsJsonAsync(uri, credential.User).Result;
Console.WriteLine(response.Content.ReadAsStringAsync().Result);
// GET using Bewit
var hawkClient = new HawkClient(options);
var request = new HttpRequestMessage()
{
RequestUri = new Uri(uri)
};
string bewit = hawkClient.CreateBewit(new WebApiRequestMessage(request),
lifeSeconds: 60);
// Bewit is handed off to a client needing temporary access to the resource.
var clientNeedingTempAccess = new WebClient();
var resource = clientNeedingTempAccess.DownloadString(uri + "?bewit=" + bewit);
Console.WriteLine(resource);
Console.Read();
}
private HttpClient CreateClient(ClientOptions options, double timeout)
{
var handler = new HawkValidationHandler(options);
var requestHandler = new WebRequestHandler
{
AllowPipelining = true,
AllowAutoRedirect = true,
CachePolicy = new HttpRequestCachePolicy(HttpRequestCacheLevel.Revalidate)
};
var client = HttpClientFactory.Create(requestHandler, handler);
client.Timeout = TimeSpan.FromMilliseconds(timeout);
client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("text/xml"));
return(client);
}
private HttpClient CreateClient(ClientOptions options, double timeout)
{
var handler = new HawkValidationHandler(options);
var requestHandler = new HttpClientHandler()
{
AllowAutoRedirect = true,
};
handler.InnerHandler = requestHandler;
var client = new HttpClient(handler)
{
Timeout = TimeSpan.FromMilliseconds(timeout),
};
client.DefaultRequestHeaders.CacheControl.MustRevalidate = true;
client.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue("text/xml"));
return(client);
}
static void Main(string[] args)
{
string uri = "http://localhost:12345/api/values";
string headerName = "X-Response-Header-To-Protect";
var credential = new Credential()
{
Id = "dh37fgj492je",
Algorithm = SupportedAlgorithms.SHA256,
User = "******",
Key = "werxhqb98rpaxn39848xrunpaw3489ruxnpa98w4rxn"
};
// GET and POST using the Authorization header
var handler = new HawkValidationHandler(credentialsCallback: () => credential,
verificationCallback: (r, ext) =>
ext.Equals(headerName + ":" + r.Headers.GetValues(headerName).First()));
HttpClient client = HttpClientFactory.Create(handler);
var response = client.GetAsync(uri).Result;
Console.WriteLine(response.Content.ReadAsStringAsync().Result);
response = client.PostAsJsonAsync(uri, credential.User).Result;
Console.WriteLine(response.Content.ReadAsStringAsync().Result);
// GET using Bewit
var hawkClient = new HawkClient(() => credential);
string bewit = hawkClient.CreateBewitAsync(new HttpRequestMessage()
{
RequestUri = new Uri(uri)
},
lifeSeconds: 60).Result;
// Bewit is handed off to a client needing temporary access to the resource.
var clientNeedingTempAccess = new WebClient();
var resource = clientNeedingTempAccess.DownloadString(uri + "?bewit=" + bewit);
Console.WriteLine(resource);
Console.Read();
}
