ASP.NET中基于soaphead的webservice安全機(jī)制

using System;
using System.Web.Services;
using System.Web.Services.Protocols;

//請注意此命名空間必須有別于代理動態(tài)連接庫上的命名空間。 
//否則，將產(chǎn)生諸如多處定義AuthHeader這樣的錯誤。 
namespace SoapHeadersCS
{

 //由SoapHeader擴(kuò)展而來的AuthHeader類 
 public class AuthHeaderCS : SoapHeader
 {
 public string Username;
 public string Password;
 }

 //[WebService(Description="用于演示SOAP頭文件用法的簡單示例")] 
 public class HeaderService
 {

 public AuthHeaderCS sHeader;

 [WebMethod(Description = "此方法要求有調(diào)用方自定義設(shè)置的soap頭文件")]
 [SoapHeader("sHeader")]
 public string SecureMethod()
 {

 if (sHeader == null)
 return "ERROR:你不是VIP用戶!";

 string usr = sHeader.Username;
 string pwd = sHeader.Password;

 if (AuthenticateUser(usr, pwd))
 {
 return "成功:" + usr + "," + pwd;
 }
 else
 {
 return "錯誤:未能通過身份驗證";
 }
 }

 private bool AuthenticateUser(string usr, string pwd)
 {

 if ((usr != null) && (pwd != null))
 {
 return true;
 }
 return false;
 }
 }
}

WebService webservice = new WebService();
AuthHeaderCS auth = new AuthHeaderCS();
auth.Username = "vip";
auth.Password = "vippw";
webservice.AuthHeaderCSValue = auth;
textBox1.Text = webservice.SecureMethod();