自定义身份验证Soap头 进行加密解密

首先我们在客户端进行对数据的加密：这里我们使用的是64位DES加密算法。

设置密钥（Key）和初始值（IV）可放在配置文件中：

<!--<br><br>Code highlighting produced by Actipro CodeHighlighter (freeware)<br>http://www.CodeHighlighter.com/<br><br>--><appSettings>
<addkey="Key"value="fdautoit"/>
<addkey="IV"value="FDAUTOIT"/>
</appSettings>

*注：上面的值只有8个字节（64位）
在.cs文件中获取“Key”和“IV”

<!--<br><br>Code highlighting produced by Actipro CodeHighlighter (freeware)<br>http://www.CodeHighlighter.com/<br><br>-->stringKey,Iv;

Key=ConfigurationManager.AppSettings["Key"];
Iv=ConfigurationManager.AppSettings["IV"];

定义一个加密方法：

<!--<br><br>Code highlighting produced by Actipro CodeHighlighter (freeware)<br>http://www.CodeHighlighter.com/<br><br>-->privatestringEncrypt(stringp_strEncrypt)
{
//SettheKeyandtheInitialVectorforEncrypt
byte[]key=Encoding.UTF8.GetBytes(Key);
byte[]iv=Encoding.UTF8.GetBytes(Iv);
//Conventthestringtobyte[]oftheData
byte[]byteData=Encoding.UTF8.GetBytes(p_strEncrypt);
//SetMemoryspaceforsavetheData
MemoryStreammemoryData=newMemoryStream();
//
//DESdes=newDESCryptoServiceProvider();
//RC2des=newRC2CryptoServiceProvider();
//Rijndaeldes=newRijndaelManaged();
TripleDESdes=newTripleDESCryptoServiceProvider();
des.Key=key;
des.IV=iv;
des.Mode=CipherMode.CBC;
//CreatetheMethodwiththeKeyandIV
ICryptoTransformtransform=des.CreateEncryptor();
//CreatetheEnCryptstream
CryptoStreamcryptostream=newCryptoStream(memoryData,transform,CryptoStreamMode.Write);

//writeintotheMemorystream
try
{
cryptostream.Write(byteData,0,byteData.Length);
}
catch
{
thrownewException("EncryptDatawrongofthewritetostream!");
}
cryptostream.FlushFinalBlock();
cryptostream.Close();
//returnmemoryData.ToString();
returnConvert.ToBase64String(memoryData.ToArray());
}

在这个方法返回的是一个加密后的数据。

<!--<br><br>Code highlighting produced by Actipro CodeHighlighter (freeware)<br>http://www.CodeHighlighter.com/<br><br>-->privatevoidValidServiceMethod()
{
//EncrypttheusernameandpasswordofSoapHeader
stringm_strName= Encrypt("admin",EncryptionAlgorithm.Des);
stringm_strPwd= Encrypt("admin",EncryptionAlgorithm.Des);
//newaSoapHeaderandaWebService
MySoapHeader myheader=new MySoapHeader ();
MyServicemyservice=newMyService();
myheader.UserName=m_strName;
myheader.PassWord=m_strPwd;
//SettheSoapHeadervalidatetoService
myservice.FDSoapHeaderValue= myheader ;
//CallMethodofwebservice
myservice.GetMoney();
}

这样就完成了加密的过程（用户名，密码，数据可以以参数的形式传入）
在服务 器端同样设置配置文件。这于客户端的是一模一样的。

<!--<br><br>Code highlighting produced by Actipro CodeHighlighter (freeware)<br>http://www.CodeHighlighter.com/<br><br>--><appSettings>
<addkey="Key"value="fdautoit"/>
<addkey="IV"value="FDAUTOIT"/>
</appSettings>

同样在代码文件中获取其值
编写解密方法：

<!--<br><br>Code highlighting produced by Actipro CodeHighlighter (freeware)<br>http://www.CodeHighlighter.com/<br><br>-->privatestringDecrypt(stringp_strDecrypt)
{
//SettheKeyandtheInitialVectorforDecrypt
byte[]key=Encoding.UTF8.GetBytes(Key);
byte[]iv=Encoding.UTF8.GetBytes(Iv);
//Coventthestringtobyte[]withtheEncryptData
//byte[]EncrypData=Encoding.UTF8.GetBytes(p_strDecrypt);
byte[]EncrypData=Convert.FromBase64String(p_strDecrypt);
//SettheMemorystreamSpaceforsavedata
MemoryStreammemoryData=newMemoryStream();
//CreateDESforDecrypt
DESCryptoServiceProviderdes=newDESCryptoServiceProvider();
des.Key=key;
des.IV=iv;
des.Mode=CipherMode.CBC;
//DecryptwiththekeyandInitialVector
ICryptoTransformtransform=des.CreateDecryptor();
//SavetoMemoryStream
CryptoStreamcryptostream=newCryptoStream(memoryData,transform,CryptoStreamMode.Write);
//outputthedata
try
{
cryptostream.Write(EncrypData,0,EncrypData.Length);
}
catch(Exceptionex)
{
thrownewException("writetostreamwrong!"+ex.Message);
}
cryptostream.FlushFinalBlock();
cryptostream.Close();
//outputdata
returnEncoding.UTF8.GetString(memoryData.ToArray());
}

Soap头:

<!--<br><br>Code highlighting produced by Actipro CodeHighlighter (freeware)<br>http://www.CodeHighlighter.com/<br><br>-->publicclassMySoapHeader:SoapHeader
{
string_name;
string_passWord;

publicstring UserName
{
get{return_name;}
set{_name=value;}
}
publicstringPassWord
{
get{return_passWord;}
set{_passWord=value;}
}
}

更改上篇中的方法：

<!--<br><br>Code highlighting produced by Actipro CodeHighlighter (freeware)<br>http://www.CodeHighlighter.com/<br><br>-->publicboolValiHeader(outstringReturnMsg)
{
MySoapHeader myheader=new MySoapHeader();
boolflag=false;
string UserName=Decrypt(myheader.UserName);
string PassWord=Decrypt(myheader.PassWord);
if(UserName=="admin"&&PassWord=="admin")
{
flag=true;
ReturnMsg="YouAreSuccessfully";
}
else
{
ReturnMsg="YouAreFailted";
}
returnflag;
}

<!--<br><br>Code highlighting produced by Actipro CodeHighlighter (freeware)<br>http://www.CodeHighlighter.com/<br><br>-->[WebMethod]
[SoapHeader("header", Direction = SoapHeaderDirection.In)]
publicstringCheckHeader()
{
stringReturnMsg="";
boolIsTrue=ValiHeader(outReturnMsg);
returnReturnMsg;
}

如果方法：“ValiHeader”返回的是true 表示验证成功，如果返回的是false表示用户名和密码有误。


有关SoapHeader验证头密码核心代码就 是这样了。其中省略了很多代码。