custom authorization and authentication in wcf webhttpbindig

Question

I create a simple wcf service with webhttpbinding as you can see :

    [OperationContract]
    [WebInvoke(Method = "GET", UriTemplate = "/Data/{data}")]
    string GetData(string data);

and the implementation :

   public string GetData(string value)
        {

                return string.Format("You entered: {0}", value);

        }

I want to create a custom authorization and authentication about 2 weeks but i can't.i googled a lot ,but i can find authentication for wshttpbinding not webhttpbinding .

My recent question that describe main problem :

My authorize custom function in wcf doesn't execute .Should i define it in webconfig?

My CustomAuthorizationPolicy.Evaluate() method never fires

score 2 · Answer 1 · answered Aug 21 '17 at 08:12

You can implement the ServiceAuthorizationManager to provide authorization to your WCF service with webhttpbinding.

Your code could look similar to this:

public class CustomAuthorizationManager : ServiceAuthorizationManager
{
    protected override bool CheckAccessCore(OperationContext operationContext)
    {
        try
        {
            ServiceSecurityContext securityContext = operationContext.ServiceSecurityContext;
            WindowsIdentity callingIdentity = securityContext.WindowsIdentity;

            WindowsPrincipal principal = new WindowsPrincipal(callingIdentity);
            return principal.IsInRole("Administrators");
        }
        catch (Exception)
        {
            return false;
        }
    }
}

Then register your custom ServiceAuthorizationManager in the web.config file:

<serviceBehaviors>
  <behavior name="ServiceBehaviour">
    <serviceMetadata httpsGetEnabled="true"/>
    <serviceAuthorization serviceAuthorizationManagerType="YourNamespace.CustomAuthorizationManager, YourAssemblyName"/>
  </behavior>
</serviceBehaviors>

Thank you ,But how can i check the role .I mean how can i check if the user role is correct execute the operation ? — Ehsan Akbar, Aug 21 '17 at 08:36
I want to check the operation role with my database role ,https://stackoverflow.com/questions/45794914/custom-authorize-and-authentication-using-operationcontext-in-wcf — Ehsan Akbar, Aug 21 '17 at 10:44

custom authorization and authentication in wcf webhttpbindig

1 Answers1