我创建了一个 WCF 数据服务，对于这个服务，我需要通过使用 HTTP 标头进行一些自定义身份验证。所以我编写了特殊的函数来验证这些信息，或者当他不允许看到它时，在用户的脸上抛出一个 403 页面。
为了方便自己，我尝试覆盖 OnStartProcessingRequest 以在每次调用时执行此检查，但由于某种原因，我的代码/WCF 服务从未调用此函数：S
这是 WCF 服务的代码：
using System;
using System.Data.Services;
using System.Linq;
using System.Text;
using System.Web;
namespace TenForce.Execution.Web.OData
{
public class TenForceApi : DataService<Entities>
{
// This method is called only once to initialize service-wide policies.
public static void InitializeService(IDataServiceConfiguration config)
{
config.SetEntitySetAccessRule("*", EntitySetRights.All);
config.UseVerboseErrors = true;
config.SetServiceOperationAccessRule("*", ServiceOperationRights.All);
}
/// <summary>
/// <para>This function is called prior to handeling requests. The function will perform basic
/// authentication using the Headers supplied by the client.</para>
/// </summary>
/// <param name="args">The arguments supplied for this call.</param>
protected override void OnStartProcessingRequest(ProcessRequestArgs args)
{
HttpContext context = HttpContext.Current;
string customAuthHeader = ExtractAuthenticationToken(context);
ValidateAuthentication(customAuthHeader.Split('|'), context);
base.OnStartProcessingRequest(args);
}
#region Private Members
/// <summary>
/// <para>This function will extract the custom tenforce authentication header from the
/// http context and return the value of that header. If the header cannot be found, a
/// DataServiceException is thrown.</para>
/// </summary>
/// <param name="context">The HttpContext object containing the custom HTTP header.</param>
/// <returns>The value of the header</returns>
/// <exception cref="DataServiceException">No Authentication Header provided.</exception>
private static string ExtractAuthenticationToken(HttpContext context)
{
if (!context.Request.Headers.AllKeys.Contains(@"TenForce-Auth"))
throw new DataServiceException(403, @"No authentication header provided.");
return Encoding.UTF8.GetString(Convert.FromBase64String(context.Request.Headers[@"TenForce-Auth"]));
}
/// <summary>
/// <para>Validates the authentication credentials stored inside the array.</para>
/// </summary>
/// <param name="values">Array holding the required authentication details.</param>
/// <param name="context">The HttpContext holding the Request and Response for this call.</param>
private static void ValidateAuthentication(string[] values, HttpContext context)
{
if (values.Length != 2) throw new DataServiceException(403, @"insufficient parameters provided for the authentication.");
string username = values[0] ?? string.Empty;
string password = values[1] ?? string.Empty;
string database = Api2.Implementation.Authenticator.ConstructDatabaseId(context.Request.Url.AbsoluteUri);
if (!Api2.Implementation.Authenticator.Authenticate(username, password, database))
{
AddResponseHeader(context, @"TenForce-RAuth", "DENIED");
throw new DataServiceException(403, @"Incorrect authentication credentials.");
}
}
/// <summary>
/// <para>Add the specific HTTP Header to the Response of the provided HttpContext.</para>
/// </summary>
/// <param name="context">The HttpContext object holding the HTTP Response.</param>
/// <param name="header">The name of the header to add to the response.</param>
/// <param name="value">The value of the header.</param>
private static void AddResponseHeader(HttpContext context, string header, string value)
{
if (!context.Request.ServerVariables[@"SERVER_SOFTWARE"].Contains(@"Microsoft-IIS/7."))
context.Response.AddHeader(header, value);
else
context.Response.Headers.Add(header, value);
}
#endregion
}
}
谁能指出问题出在哪里？