wif 4.5 ClaimsAuthorizationManager ClaimsIdentity

本文介绍了wif 4.5 ClaimsAuthorizationManager ClaimsIdentity的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！

问题描述

目前正在与ClaimsAuthorizationManager的身份问题作斗争。我已经在asp.net（iis）中托管了wcf服务，并使用wif 4.5和自定义
声明授权管理器保护它，但问题是我在调用ClaimsAuthorizationManager.CheckAccess时无法获得ClaimsIdentity，而是Identity键入GenericIdentity。如果我设置一个ClaimsAuthenticationManager ClamsIdentity按预期工作。事件
设置两者，但ClaimsAuthorizationManager无法正常工作。似乎在ClaimsIdentity构建之前调用它。任何想法？

<service name="Service" behaviorConfiguration="ActiveSTSEndpointBehavior">
        <endpoint address="" binding="ws2007FederationHttpBinding" bindingConfiguration="Active" contract="IService" />
</service>

<behavior name="ActiveSTSEndpointBehavior">
          <!--<federatedServiceHostConfiguration />-->
  <serviceCredentials useIdentityConfiguration="true">
    <serviceCertificate  x509FindType="FindByThumbprint" findValue="[cert]" storeLocation="LocalMachine" storeName="My" />  
  </serviceCredentials>
  <serviceAuthorization principalPermissionMode="Always" />
  <serviceMetadata httpGetEnabled="true" />
  <serviceDebug includeExceptionDetailInFaults="true" />
</behavior>

<ws2007FederationHttpBinding>
        <binding name="Active" maxReceivedMessageSize="2147483647">

          <readerQuotas maxDepth="2147483647" maxStringContentLength="2147483647" maxArrayLength="2147483647" maxBytesPerRead="2147483647" maxNameTableCharCount="2147483647" />
          <security mode="Message">
            <message establishSecurityContext="false" negotiateServiceCredential="false" />
          </security>
        </binding>
      </ws2007FederationHttpBinding>

<system.identityModel>
    <identityConfiguration>   <!--saveBootstrapTokens="true"-->
      <claimsAuthorizationManager type="ProjectName.DefaultClaimsAuthorizationManager, ProjectName"/>
      <claimsAuthenticationManager type="ProjectName.DefaultClaimsAuthenticationManager, ProjectName"/>

public override bool CheckAccess(AuthorizationContext context)
{
    var identity = context.Principal.Identity as ClaimsIdentity;
    if (identity == null)
    {
        return false;
    }

    var usernameClaim = identity.Claims.SingleOrDefault(item => item.Type == System.IdentityModel.Claims.ClaimTypes.Upn);
    if (usernameClaim == null)
    {
        return false;
    }

< service behaviorconfiguration =" ActiveSTSEndpointBehavior" name =" Service">< endpoint address =""结合= QUOT; ws2007FederationHttpBinding" bindingconfiguration = QUOT;活动"合同= QUOT; IService">< /端点>< /服务>
< behavior name =" ActiveSTSEndpointBehavior">< / behavior>< system.identitymodel>< identityconfiguration>< / identityconfiguration>< /system.identitymodel>

Service

wif 4.5 ClaimsAuthorizationManager ClaimsIdentity

问题描述

推荐答案