是否有WCF服务位于ASPNET成员资格之上并提供登录/创建用户功能? [英] Is there a WCF service to sit on top of ASPNET Membership and provide login/create user functionality?

问题描述

我需要一个WCF服务才能位于ASPNET成员资格之上，并允许我调用ASPNET成员资格的所有方法，例如validateUser，createUser等.

I need a WCF service to sit on top of ASPNET membership and allow me to call all the methods of ASPNET membership such as validateUser, createUser etc.

我需要这个，因为我有防火墙外的应用程序，它们需要访问单个中央ASPNET成员数据库.如果它们都在防火墙内，我只需将连接字符串指向数据库即可.

I need this becasue I have out-of-firewall apps that need to access a single central ASPNET membership database. If they were all inside the firewall I'd just point the connectionstring to the database and be done.

Microsoft提供此服务: WCF身份验证服务

Microsoft provides this service : WCF Authentication Service

当我看到这个时，我以为很棒-那就是我所需要的".然后我看了一下界面:

When I saw this I thought 'great - thats just what I need'. Then I looked at the interface :

public interface AuthenticationService {

    bool ValidateUser(string username, string password, string customCredential);
    bool Login(string username, string password, string customCredential, bool isPersistent);
    bool IsLoggedIn();
    void Logout();
}

哦，哦！没有"CreateUser"等.

Uh oh! No 'CreateUser' etc.

我找到了一个代码项目，该代码项目基本上可以满足我的要求:自定义MembershipProvider和RoleProvider实现使用Web服务.问题是它是ASMX，我需要WFC.它也是大量的代码，我不知道它的测试程度.

I found a Codeproject which basically does what I want : Custom MembershipProvider and RoleProvider Implementations that use Web Services. The problem is it is ASMX and I need WFC. It is also a tremendous amount of code and I don't know how well it is tested.

我认为我可能必须创建自己的服务才能执行此操作-但我敢肯定必须有一个现有的示例.我只是还没有找到.我自己写它有点疲倦，因为涉及到安全性时总是会遇到麻烦，我不想错过任何东西.

I'm thinking I may have to just create my own service to do this - but I'm sure there must be an existing example of this out there. I just haven't found it yet. I'm slightly weary of writing it myself because there are always catches when it comes to security and I don't want to miss anything.

幸运的是，我在ASP.NET MVC中使用了IMembershipService接口，因此我可以轻松地插入所需的任何内容.我自己的服务是最简单的方法吗?

Fortunately I'm using the IMembershipService interface in ASP.NET MVC so I can pretty easily slot in whatever I want to. Is my own service the easiest way ?

推荐答案

试一下.您必须确保这个终点！

Give this a shot. You MUST SECURE THIS ENDPOINT!

using System;
using System.Collections;
using System.Collections.Generic;
using System.Runtime.Serialization;
using System.ServiceModel;
using System.ServiceModel.Activation;
using System.Text.RegularExpressions;
using System.Web.Security;
namespace Salient.ServiceModel.AspNetProviders
{
    [ServiceContract(Namespace = "Salient.ServiceModel.AspNetProviders", Name = "MembershipProvider")]
    public interface IMembershipProvider
    {
        string ProviderName { get; set; }

        [OperationContract]
        ProviderProperties GetProviderProperties();
        [OperationContract]
        MembershipUser GetUserByKey(object providerUserKey, bool userIsOnline);
        [OperationContract]
        MembershipCreateResult CreateUser(string username, string password,
                                          string email, string passwordQuestion,
                                          string passwordAnswer, bool isApproved,
                                          object providerUserKey);
        [OperationContract]
        MembershipCreateResult AddUser(MembershipUser user);
        [OperationContract]
        bool ChangePasswordQuestionAndAnswer(string username, string password,
                                             string newPasswordQuestion, string newPasswordAnswer);
        [OperationContract]
        string GetPassword(string username, string answer);
        [OperationContract]
        bool ChangePassword(string username, string oldPassword, string newPassword);
        [OperationContract]
        string ResetPassword(string username, string answer);
        [OperationContract]
        void UpdateUser(MembershipUser user);
        [OperationContract]
        bool ValidateUser(string username, string password);
        [OperationContract]
        bool UnlockUser(string userName);
        [OperationContract]
        MembershipUser GetUserByName(string username, bool userIsOnline);
        [OperationContract]
        string GetUserNameByEmail(string email);
        [OperationContract]
        bool DeleteUser(string username, bool deleteAllRelatedData);
        [OperationContract]
        MembershipFindResult GetAllUsers(int pageIndex, int pageSize);
        [OperationContract]
        int GetNumberOfUsersOnline();
        [OperationContract]
        MembershipFindResult FindUsersByName(string usernameToMatch, int pageIndex,
                                             int pageSize);
        [OperationContract]
        MembershipFindResult FindUsersByEmail(string emailToMatch, int pageIndex,
                                              int pageSize);
    }
    [AspNetCompatibilityRequirements(RequirementsMode = AspNetCompatibilityRequirementsMode.Allowed)]
    public class MembershipProvider : IMembershipProvider
    {
        private System.Web.Security.MembershipProvider Provider
        {
            get
            {
                if (string.IsNullOrEmpty(ProviderName))
                {
                    return Membership.Provider;
                }
                return Membership.Providers[ProviderName];
            }
        }
        #region IMembershipProvider Members
        public DateTime TestInput(DateTime date)
        {
            return date;
        }
        public string ProviderName { get; set; }
        public ProviderProperties GetProviderProperties()
        {
            var returnValue = new ProviderProperties
                                  {
                                      ApplicationName = Provider.ApplicationName,
                                      EnablePasswordReset = Provider.EnablePasswordReset,
                                      EnablePasswordRetrieval = Provider.EnablePasswordRetrieval,
                                      MaxInvalidPasswordAttempts = Provider.MaxInvalidPasswordAttempts,
                                      MinRequiredNonAlphanumericCharacters =
                                          Provider.MinRequiredNonAlphanumericCharacters,
                                      MinRequiredPasswordLength = Provider.MinRequiredPasswordLength,
                                      PasswordAttemptWindow = Provider.PasswordAttemptWindow,
                                      PasswordFormat = Provider.PasswordFormat,
                                      PasswordStrengthRegularExpression = Provider.PasswordStrengthRegularExpression,
                                      RequiresQuestionAndAnswer = Provider.RequiresQuestionAndAnswer,
                                      RequiresUniqueEmail = Provider.RequiresUniqueEmail
                                  };
            return returnValue;
        }
        public MembershipUser GetUserByKey(object providerUserKey, bool userIsOnline)
        {
            return Provider.GetUser(providerUserKey, userIsOnline);
        }
        public MembershipCreateResult CreateUser(string username, string password,
                                                 string email, string passwordQuestion,
                                                 string passwordAnswer, bool isApproved,
                                                 object providerUserKey)
        {
            MembershipCreateStatus status;
            MembershipUser user = Provider.CreateUser(username, password, email, passwordQuestion, passwordAnswer,
                                                      isApproved,
                                                      providerUserKey, out status);
            return new MembershipCreateResult(user, status);
        }
        public MembershipCreateResult AddUser(MembershipUser user)
        {
            return new MembershipCreateResult(user, MembershipCreateStatus.DuplicateEmail);
        }
        public bool ChangePasswordQuestionAndAnswer(string username, string password,
                                                    string newPasswordQuestion, string newPasswordAnswer)
        {
            return Provider.ChangePasswordQuestionAndAnswer(username, password, newPasswordQuestion, newPasswordAnswer);
        }
        public string GetPassword(string username, string answer)
        {
            return Provider.GetPassword(username, answer);
        }
        public bool ChangePassword(string username, string oldPassword, string newPassword)
        {
            return Provider.ChangePassword(username, oldPassword, newPassword);
        }
        public string ResetPassword(string username, string answer)
        {
            return Provider.ResetPassword(username, answer);
        }
        public void UpdateUser(MembershipUser user)
        {
            Provider.UpdateUser(user);
        }
        public bool ValidateUser(string username, string password)
        {
            return Provider.ValidateUser(username, password);
        }
        public bool UnlockUser(string userName)
        {
            return Provider.UnlockUser(userName);
        }
        public MembershipUser GetUserByName(string username, bool userIsOnline)
        {
            return Provider.GetUser(username, userIsOnline);
        }
        public string GetUserNameByEmail(string email)
        {
            return Provider.GetUserNameByEmail(email);
        }
        public bool DeleteUser(string username, bool deleteAllRelatedData)
        {
            return Provider.DeleteUser(username, deleteAllRelatedData);
        }
        public MembershipFindResult GetAllUsers(int pageIndex, int pageSize)
        {
            int totalRecords;
            MembershipUserCollection users = Provider.GetAllUsers(pageIndex, pageSize, out totalRecords);
            var list = new List<MembershipUser>();
            foreach (MembershipUser user in users)
            {
                list.Add(user);
            }
            return new MembershipFindResult(list, totalRecords);
        }
        public int GetNumberOfUsersOnline()
        {
            return Provider.GetNumberOfUsersOnline();
        }
        public MembershipFindResult FindUsersByName(string usernameToMatch, int pageIndex,
                                                    int pageSize)
        {
            int totalRecords;
            MembershipUserCollection users = Provider.FindUsersByName(usernameToMatch, pageIndex, pageSize,
                                                                      out totalRecords);
            var list = new List<MembershipUser>();
            foreach (MembershipUser user in users)
            {
                list.Add(user);
            }
            return new MembershipFindResult(list, totalRecords);
        }
        public MembershipFindResult FindUsersByEmail(string emailToMatch, int pageIndex,
                                                     int pageSize)
        {
            int totalRecords;
            MembershipUserCollection users = Provider.FindUsersByEmail(emailToMatch, pageIndex, pageSize,
                                                                       out totalRecords);
            var list = new List<MembershipUser>();
            foreach (MembershipUser user in users)
            {
                list.Add(user);
            }
            return new MembershipFindResult(list, totalRecords);
        }
        #endregion
    }
    [DataContract]
    public class MembershipFindResult
    {
        [DataMember]
        public int RecordCount;
        [DataMember]
        public IEnumerable<MembershipUser> Users;
        public MembershipFindResult()
        {
        }
        public MembershipFindResult(IEnumerable<MembershipUser> users, int recordCount)
        {
            Users = users;
            RecordCount = recordCount;
        }
    }
    [DataContract]
    public class MembershipCreateResult
    {
        [DataMember]
        public MembershipCreateStatus CreateStatus;
        [DataMember]
        public MembershipUser User;
        public MembershipCreateResult()
        {
        }
        public MembershipCreateResult(MembershipUser user, MembershipCreateStatus createStatus)
        {
            User = user;
            CreateStatus = createStatus;
        }
    }
    [DataContract]
    public class ProviderProperties
    {
        public ProviderProperties()
        {
        }
        public ProviderProperties(bool enablePasswordRetrieval, bool enablePasswordReset, bool requiresQuestionAndAnswer,
                                  int maxInvalidPasswordAttempts,
                                  int passwordAttemptWindow, bool requiresUniqueEmail,
                                  MembershipPasswordFormat passwordFormat, int minRequiredPasswordLength,
                                  int minRequiredNonAlphanumericCharacters,
                                  string passwordStrengthRegularExpression, string applicationName)
        {
            EnablePasswordRetrieval = enablePasswordRetrieval;
            EnablePasswordReset = enablePasswordReset;
            RequiresQuestionAndAnswer = requiresQuestionAndAnswer;
            MaxInvalidPasswordAttempts = maxInvalidPasswordAttempts;
            PasswordAttemptWindow = passwordAttemptWindow;
            RequiresUniqueEmail = requiresUniqueEmail;
            PasswordFormat = passwordFormat;
            MinRequiredPasswordLength = minRequiredPasswordLength;
            MinRequiredNonAlphanumericCharacters = minRequiredNonAlphanumericCharacters;
            PasswordStrengthRegularExpression = passwordStrengthRegularExpression;
            ApplicationName = applicationName;
        }
        [DataMember]
        public bool EnablePasswordRetrieval { get;  set; }
        [DataMember]
        public bool EnablePasswordReset { get;  set; }
        [DataMember]
        public bool RequiresQuestionAndAnswer { get;  set; }
        [DataMember]
        public int MaxInvalidPasswordAttempts { get;  set; }
        [DataMember]
        public int PasswordAttemptWindow { get;  set; }
        [DataMember]
        public bool RequiresUniqueEmail { get;  set; }
        [DataMember]
        public MembershipPasswordFormat PasswordFormat { get;  set; }
        [DataMember]
        public int MinRequiredPasswordLength { get;  set; }
        [DataMember]
        public int MinRequiredNonAlphanumericCharacters { get;  set; }
        [DataMember]
        public string PasswordStrengthRegularExpression { get;  set; }
        [DataMember]
        public string ApplicationName { get;  set; }
    }
}

我是否提到过您必须确保这个终点?

这篇关于是否有WCF服务位于ASPNET成员资格之上并提供登录/创建用户功能?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！