WCF 身份验证 通过检查客户端IP

WCF 身份验证

功能描述:

服务运行的时候，通过配置文件获取所有可访问SOA端的服务IP。每次客户调用服务时获取IP对比判定通过。

以下是获取客户端IP的代码:

/*************************************************************************************
* 代码:吴蒋
* 时间:2012.02.07
* 说明:安全类
* 其他:
* 修改人：
* 修改时间：
* 修改说明：
************************************************************************************/
using System.ServiceModel;
using System.ServiceModel.Channels;

namespace Tools
{
public class Safe
{
public static Safe Instance()
{
return new Safe();
}

public string ClientIp()
{
OperationContext context = OperationContext.Current;
MessageProperties properties = context.IncomingMessageProperties;
RemoteEndpointMessageProperty endpoint = properties[RemoteEndpointMessageProperty.Name] as RemoteEndpointMessageProperty;
return endpoint.Address;
}

public string ClientPort()
{
OperationContext context = OperationContext.Current;
MessageProperties properties = context.IncomingMessageProperties;
RemoteEndpointMessageProperty endpoint = properties[RemoteEndpointMessageProperty.Name] as RemoteEndpointMessageProperty;
return endpoint.Port.ToString();
}

public string ClientIpAndPort()
{
OperationContext context = OperationContext.Current;
MessageProperties properties = context.IncomingMessageProperties;
RemoteEndpointMessageProperty endpoint = properties[RemoteEndpointMessageProperty.Name] as RemoteEndpointMessageProperty;
return endpoint.Address + ";" + endpoint.Port.ToString();
}
}
}

XML 存放可访问IP

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
<ip>192.168.0.71</ip>
<ip>192.168.0.6</ip>
<ip>127.0.0.1</ip>
<ip>192.168.0.72</ip>
<ip>192.168.0.136</ip>
<ip>192.168.0.3</ip>
</configuration>

#region 特殊函数
/// <summary>
/// 匹配允许访问IP
/// </summary>
/// <param name="path">文件路径</param>
/// <param name="node">节点名称</param>
/// <returns>转换为DataTable</returns>
public DataTable ReadRunIP(string path, string node)
{
XmlDocument doc = new XmlDocument();
doc.Load(path);
DataTable dt = new DataTable();
dt.Columns.Add("ip", typeof(string));
XmlNodeList xnlist = doc.SelectNodes(node);
if (xnlist.Count > 0)
{
for (int i = 0; i < xnlist.Count; i++)
{
DataRow dr = dt.NewRow();
dr["ip"] = xnlist[i].InnerText;
dt.Rows.Add(dr);
}
}
return dt;
}
#endregion

页面加载时获取所有可访问IP

public static DataTable dtRunIp;
public static string MapPath = ConfigurationManager.ConnectionStrings["configPath"].ConnectionString;

protected void Application_Start(object sender, EventArgs e)
{
dtRunIp = XMLHelper.XmlHelper.Instance().ReadRunIP(MapPath + "/Config/RunConfig.config", "//configuration/ip");
}

判断IP许可

在服务中的应用：

[ServiceContract]
public class SOAControl
{
string msgr = "无访问权限、服务器积极拒绝";
//获取xml文档
[OperationContract]
public string GetXML(ref string msg)
{

if (Certificate.IsCanRead())
{
return XmlHelper.Instance().XmlDocumentToString(Global.MapPath + "/Control/Control.config".ToString());
}
else
{
msg = msgr;
return null;
}
}

public static bool IsCanRead()
{
string clientIp = Tools.Safe.Instance().ClientIp();
bool r = false;
if (Global.dtRunIp.Rows.Count > 0)
{
for (int i = 0; i < Global.dtRunIp.Rows.Count; i++)
{
if (clientIp == Global.dtRunIp.Rows[i]["ip"].ToString())
{
r = true;
}
}
}
return r;

}

WCF的配置文件设置

<?xml version="1.0"?>
<configuration>
<system.serviceModel>
<bindings>
<wsHttpBinding>
<binding name="NoneSecurity"
maxBufferPoolSize="12000000" maxReceivedMessageSize="12000000" useDefaultWebProxy="false">
<readerQuotas maxStringContentLength="12000000" maxArrayLength="12000000"/>
<security mode="None"/>
</binding>
</wsHttpBinding>
</bindings>
<behaviors>
<serviceBehaviors>
<behavior name="Control.Service.SOAControlBehavior">
<serviceMetadata httpGetEnabled="true"/>
<serviceDebug includeExceptionDetailInFaults="false"/>
</behavior>
</serviceBehaviors>
</behaviors>
<services>
<service behaviorConfiguration="Control.Service.SOAControlBehavior" name="Control.Service.SOAControl">
<endpoint address="" binding="wsHttpBinding" contract="Control.Service.SOAControl" bindingConfiguration="NoneSecurity">
<identity>
<dns value="localhost"/>
</identity>
</endpoint>
<endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange"/>
</service>
</services>
</system.serviceModel>
</configuration>

注意事项，在客户端访问的时候是IP6的，可以直接将IP保存到XML文件中，或禁用IP6

源码下载 http://download.csdn.net/detail/wujiang1984/4131313 点击打开链接