Ler en inglés

Compartir por


AuthenticationManager Clase

Definición

Precaución

AuthenticationManager is not supported. Methods will no-op or throw PlatformNotSupportedException.

Administra los módulos de autenticación a los que se llama durante el proceso de autenticación del cliente.

C#
public class AuthenticationManager
C#
[System.Obsolete("AuthenticationManager is not supported. Methods will no-op or throw PlatformNotSupportedException.", DiagnosticId="SYSLIB0009", UrlFormat="https://aka.ms/dotnet-warnings/{0}")]
public class AuthenticationManager
Herencia
AuthenticationManager
Atributos

Ejemplos

C#

// The following example shows how to create a custom Basic authentication module,
// how to register it using the AuthenticationManager class and how to authorize
// users to access a Web site.
// Note: To run this program you must create a test Web site that performs
// Basic authentication. Also you must add to your server machine a user whose
// credentials are the same as the ones you use in this program.
// Attention: Basic authentication sends the user's credentials over HTTP.
// Passwords and user names are encoded using Base64 encoding. Although the
// user information is encoded, it is considered insecure becasue it could be deciphered
// relatively easily.
// If you must use Basic authentication you are strongly advised to use strong
// security mechanisms, such as SSL, when transferring sensitive information.

using System;
using System.Net;
using System.IO;
using System.Text;
using System.Collections;

namespace Mssc.Services.Authentication
{
  // The TestAuthentication class performs the following main tasks:
  // 1) Obtains the user's credentials.
  // 2) Unregisters the standard Basic authentication.
  // 3) Registers the custom Basic authentication.
  // 4) Reads the selected page and displays it on the console.
  class TestAuthentication
  {

    private static string username, password, domain, uri;

    // This method invoked when the user does not enter the required input parameters.
    private static void ShowUsage()
    {
      Console.WriteLine("Attempts to authenticate to a URL");
      Console.WriteLine("\r\nUse one of the following:");
      Console.WriteLine("\tcustomBasicAuthentication URL username password domain");
      Console.WriteLine("\tcustomBasicAuthentication URL username password");
    }

    // Display registered authentication modules.
    private static void DisplayRegisteredModules()
    {
      // The AuthenticationManager calls all authentication modules sequentially
      // until one of them responds with an authorization instance.  Show
      // the current registered modules.
      IEnumerator registeredModules = AuthenticationManager.RegisteredModules;
      Console.WriteLine("\r\nThe following authentication modules are now registered with the system:");
      while(registeredModules.MoveNext())
      {
        Console.WriteLine("\r \n Module : {0}",registeredModules.Current);
        IAuthenticationModule currentAuthenticationModule = (IAuthenticationModule)registeredModules.Current;
        Console.WriteLine("\t  CanPreAuthenticate : {0}",currentAuthenticationModule.CanPreAuthenticate);
      }
    }

    // The GetPage method accesses the selected page and displays its content
    // on the console.
    private static void GetPage(String url)
    {
      try
      {
        // Create the Web request object.
        HttpWebRequest req = (HttpWebRequest) WebRequest.Create(url);

        // Define the request access method.
        req.Method = "GET";

        // Define the request credentials according to the user's input.
        if (string.IsNullOrEmpty(domain))
          req.Credentials = new NetworkCredential(username, password);
        else
          // If the user does not specify the Internet resource domain, this usually
          // is by default the name of the sever hosting the resource.
          req.Credentials = new NetworkCredential(username, password, domain);

        // Issue the request.
        using HttpWebResponse result = (HttpWebResponse) req.GetResponse();

        Console.WriteLine("\nAuthentication Succeeded:");

        // Store the response.
        Stream sData = result.GetResponseStream();

        // Display the response.
        DisplayPageContent(sData);
      }
      catch (WebException e)
      {
        // Display any errors. In particular, display any protocol-related error.
        if (e.Status == WebExceptionStatus.ProtocolError)
        {
          HttpWebResponse hresp = (HttpWebResponse) e.Response;
          Console.WriteLine("\nAuthentication Failed, " + hresp.StatusCode);
          Console.WriteLine("Status Code: " + (int) hresp.StatusCode);
          Console.WriteLine("Status Description: " + hresp.StatusDescription);
          return;
        }
        Console.WriteLine("Caught Exception: " + e.Message);
        Console.WriteLine("Stack: " + e.StackTrace);
      }
    }

    // The DisplayPageContent method display the content of the
    // selected page.
    private static void DisplayPageContent(Stream ReceiveStream)
    {
      // Create an ASCII encoding object.
      Encoding ASCII = Encoding.ASCII;

      // Define the byte array to temporarily hold the current read bytes.
      Byte[] read = new Byte[512];

      Console.WriteLine("\r\nPage Content...\r\n");

      // Read the page content and display it on the console.
      // Read the first 512 bytes.
      int bytes = ReceiveStream.Read(read, 0, 512);
      while (bytes > 0)
      {
        Console.Write(ASCII.GetString(read, 0, bytes));
        bytes = ReceiveStream.Read(read, 0, 512);
      }
      Console.WriteLine("");
    }

    // This is the program entry point. It allows the user to enter
    // her credentials and the Internet resource (Web page) to access.
    // It also unregisters the standard and registers the customized Basic
    // authentication.
    public static void Main(string[] args)
    {

      if (args.Length < 3)
            {
                ShowUsage();
            }
            else
      {

        // Read the user's credentials.
        uri = args[0];
        username = args[1];
        password = args[2];

        if (args.Length == 3)
          domain = string.Empty;
        else
          // If the domain exists, store it. Usually the domain name
          // is by default the name of the server hosting the Internet
          // resource.
          domain = args[3];

        // Instantiate the custom Basic authentication module.
        CustomBasic customBasicModule = new CustomBasic();

        // Unregister the standard Basic authentication module.
        AuthenticationManager.Unregister("Basic");

        // Register the custom Basic authentication module.
        AuthenticationManager.Register(customBasicModule);

        // Display registered authorization modules.
        DisplayRegisteredModules();

        // Read the specified page and display it on the console.
        GetPage(uri);
      }
      return;
    }
  }

  // The CustomBasic class creates a custom Basic authentication by implementing the
  // IAuthenticationModule interface. It performs the following
  // tasks:
  // 1) Defines and initializes the required properties.
  // 2) Implements the Authenticate method.

  public class CustomBasic : IAuthenticationModule
  {

    // Define the authentication type. This type is then used to identify this
    // custom authentication module. The default is set to Basic.
    public string AuthenticationType { get; } = "Basic";

    // Define the pre-authentication capabilities for the module. The default is set
    // to false.
    public bool CanPreAuthenticate { get; }

    // The CheckChallenge method checks whether the challenge sent by the HttpWebRequest
    // contains the correct type (Basic) and the correct domain name.
    // Note: The challenge is in the form BASIC REALM="DOMAINNAME";
    // the Internet Web site must reside on a server whose
    // domain name is equal to DOMAINNAME.
    public bool CheckChallenge(string challenge, string domain)
    {
      bool challengePasses = false;

      String tempChallenge = challenge.ToUpper();

      // Verify that this is a Basic authorization request and that the requested domain
      // is correct.
      // Note: When the domain is an empty string, the following code only checks
      // whether the authorization type is Basic.

      if (tempChallenge.IndexOf("BASIC") != -1)
        if (!string.IsNullOrEmpty(domain))
          if (tempChallenge.IndexOf(domain.ToUpper()) != -1)
            challengePasses = true;
          else
            // The domain is not allowed and the authorization type is Basic.
            challengePasses = false;
        else
          // The domain is a blank string and the authorization type is Basic.
          challengePasses = true;

      return challengePasses;
    }

    // The PreAuthenticate method specifies whether the authentication implemented
    // by this class allows pre-authentication.
    // Even if you do not use it, this method must be implemented to obey to the rules
    // of interface implementation.
    // In this case it always returns null.
    public Authorization PreAuthenticate(WebRequest request, ICredentials credentials)
    {
      return null;
    }

    // Authenticate is the core method for this custom authentication.
    // When an Internet resource requests authentication, the WebRequest.GetResponse
    // method calls the AuthenticationManager.Authenticate method. This method, in
    // turn, calls the Authenticate method on each of the registered authentication
    // modules, in the order in which they were registered. When the authentication is
    // complete an Authorization object is returned to the WebRequest.
    public Authorization Authenticate(String challenge, WebRequest request, ICredentials credentials)
    {
      Encoding ASCII = Encoding.ASCII;

      // Get the username and password from the credentials
      NetworkCredential myCreds = credentials.GetCredential(request.RequestUri, "Basic");

      if (PreAuthenticate(request, credentials) == null)
        Console.WriteLine("\n Pre-authentication is not allowed.");
      else
        Console.WriteLine("\n Pre-authentication is allowed.");

      // Verify that the challenge satisfies the authorization requirements.
      bool challengeOk = CheckChallenge(challenge, myCreds.Domain);

      if (!challengeOk)
        return null;

      // Create the encrypted string according to the Basic authentication format as
      // follows:
      // a)Concatenate the username and password separated by colon;
      // b)Apply ASCII encoding to obtain a stream of bytes;
      // c)Apply Base64 encoding to this array of bytes to obtain the encoded
      // authorization.
      string basicEncrypt = myCreds.UserName + ":" + myCreds.Password;

      string basicToken = "Basic " + Convert.ToBase64String(ASCII.GetBytes(basicEncrypt));

      // Create an Authorization object using the encoded authorization above.
      Authorization resourceAuthorization = new Authorization(basicToken);

      // Get the Message property, which contains the authorization string that the
      // client returns to the server when accessing protected resources.
      Console.WriteLine("\n Authorization Message:{0}",resourceAuthorization.Message);

      // Get the Complete property, which is set to true when the authentication process
      // between the client and the server is finished.
      Console.WriteLine("\n Authorization Complete:{0}",resourceAuthorization.Complete);

      Console.WriteLine("\n Authorization ConnectionGroupId:{0}",resourceAuthorization.ConnectionGroupId);

      return resourceAuthorization;
    }
  }
}

Comentarios

AuthenticationManager es una clase estática que administra los módulos de autenticación que usa una aplicación. Cuando se realiza una solicitud a recursos protegidos, AuthenticationManager llama al Authenticate método para obtener una Authorization instancia que se usará en solicitudes posteriores.

Consulta AuthenticationManager cada módulo de autenticación registrado llamando al IAuthenticationModule.Authenticate método para cada módulo. El primer módulo de autenticación para devolver una Authorization instancia se usa para autenticar la solicitud.

Los módulos que proporcionan los tipos de autenticación básico, implícita, negotiate, NTLM y Kerberos se registran de AuthenticationManager forma predeterminada. Se pueden agregar módulos de autenticación adicionales que implementan la IAuthenticationModule interfaz mediante el Register método . Se llama a los módulos de autenticación en el orden en el que se agregaron a la lista.

Propiedades

CredentialPolicy
Obsoletos.

Obtiene o establece la directiva de credenciales que se utilizará para las solicitudes de recursos realizadas con la clase HttpWebRequest.

CustomTargetNameDictionary
Obsoletos.

Obtiene el diccionario que contiene los Nombres de entidad de seguridad de servicio (SPN) utilizados para identificar los hosts durante la autenticación Kerberos para las solicitudes realizadas utilizando WebRequest y sus clases derivadas.

RegisteredModules
Obsoletos.

Obtiene una lista de módulos de autenticación registrados con el administrador de autenticación.

Métodos

Authenticate(String, WebRequest, ICredentials)
Obsoletos.

Llama a cada uno de los módulos de autenticación registrados para encontrar el primer módulo que pueda responder a la solicitud de autenticación.

Equals(Object)
Obsoletos.

Determina si el objeto especificado es igual que el objeto actual.

(Heredado de Object)
GetHashCode()
Obsoletos.

Sirve como la función hash predeterminada.

(Heredado de Object)
GetType()
Obsoletos.

Obtiene el Type de la instancia actual.

(Heredado de Object)
MemberwiseClone()
Obsoletos.

Crea una copia superficial del Object actual.

(Heredado de Object)
PreAuthenticate(WebRequest, ICredentials)
Obsoletos.

Realiza la autenticación previa de una solicitud.

Register(IAuthenticationModule)
Obsoletos.

Registra un módulo de autenticación con el administrador de autenticación.

ToString()
Obsoletos.

Devuelve una cadena que representa el objeto actual.

(Heredado de Object)
Unregister(IAuthenticationModule)
Obsoletos.

Quita el módulo de autenticación especificado de la lista de módulos registrados.

Unregister(String)
Obsoletos.

Quita módulos de autenticación con el esquema de autenticación especificado de la lista de módulos registrados.

Se aplica a

Produto Versións (Obsoleto)
.NET Core 2.0, Core 2.1, Core 2.2, Core 3.0, Core 3.1, 5, 6, 7, 8 (9)
.NET Framework 1.1, 2.0, 3.0, 3.5, 4.0, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, 4.8.1
.NET Standard 2.0, 2.1

Consulte también