SL OOB模式下COOKIE处理

 原来想实现SL OOB模式下单点登录模式，服务器使用了AuthenticationDomainService，在IE里（Browser networking stack），一切正常。但OOB模式下（Client networking stack ）每次都只能再次登录，没办法共享cookie.在网上查了一些资料，这个问题实在是解决不了，天生就是这样的机制。

 下面是需要COOKIE处理的核心代码

 

 

using System;using System.Net;using System.Windows;using System.Windows.Controls;using System.Windows.Documents;using System.Windows.Ink;using System.Windows.Input;using System.Windows.Media;using System.Windows.Media.Animation;using System.Windows.Shapes;using System.ServiceModel.DomainServices.Client;using System.ServiceModel;using System.ServiceModel.Channels;using System.ServiceModel.Description;using System.ServiceModel.Dispatcher;namespace ClinetNetStackTest{    public static class ClientHttpAuthenticationUtility    {        static readonly SharedCookieHttpBehavior sharedCookieBehavior = new SharedCookieHttpBehavior();        public static void ShareCookieContainer(DomainContext context)        {            var channelFactoryProperty = context.DomainClient.GetType().GetProperty("ChannelFactory");            if (channelFactoryProperty == null)                throw new InvalidOperationException("There is no 'ChannelFactory' property on the DomainClient.");            var factory = (ChannelFactory)channelFactoryProperty.GetValue(context.DomainClient, null);            ((CustomBinding)factory.Endpoint.Binding).Elements.Insert(0, new HttpCookieContainerBindingElement());            factory.Endpoint.Behaviors.Add(sharedCookieBehavior);        }        class SharedCookieHttpBehavior : WebHttpBehavior        {            readonly SharedCookieMessageInspector inspector = new SharedCookieMessageInspector();            public override void ApplyClientBehavior(ServiceEndpoint endpoint, ClientRuntime clientRuntime)            {                clientRuntime.MessageInspectors.Add(inspector);            }        }        class SharedCookieMessageInspector : IClientMessageInspector        {            public SharedCookieMessageInspector()            {            }            static CookieContainer cookieContainer = new CookieContainer();            public void AfterReceiveReply(ref Message reply, object correlationState)            {#if DEBUG                    HttpResponseMessageProperty httpResponse =                        reply.Properties[HttpResponseMessageProperty.Name] as HttpResponseMessageProperty;                    if (httpResponse != null)                    {                        string cookie = httpResponse.Headers["Set-Cookie"]; //这里取不到httponly                        if (!string.IsNullOrEmpty(cookie))                        {                            MessageBox.Show("收到Cookie" + cookie);                        }#endif                }                            }            public object BeforeSendRequest(ref Message request, IClientChannel channel)            {                channel.GetProperty<IHttpCookieContainerManager>().CookieContainer = cookieContainer;                return null;            }        }    }}

 

在SL的App里加上以下代码

  if (Application.Current.IsRunningOutOfBrowser)            {               bool b= WebRequest.RegisterPrefix("http://", WebRequestCreator.ClientHttp);               b= WebRequest.RegisterPrefix("https://", WebRequestCreator.ClientHttp);            }

还有个关键地方要处理一下.重写domianservice的oncreated代码，将COOKIE处理的逻辑进入注入，以后在交互过程中传递cookie

using System;using System.Net;using System.Windows;using System.Windows.Controls;using System.Windows.Documents;using System.Windows.Ink;using System.Windows.Input;using System.Windows.Media;using System.Windows.Media.Animation;using System.Windows.Shapes;namespace ClinetNetStackTest.Web.Services{    public partial class AuthenticationDomainContext    {        partial void OnCreated()        {            if (Application.Current.IsRunningOutOfBrowser)                ClientHttpAuthenticationUtility.ShareCookieContainer(this);        }    }}

 

 

服务器端代码如下：

using System;using System.Collections.Generic;using System.ComponentModel;using System.ComponentModel.DataAnnotations;using System.Linq;using System.ServiceModel.DomainServices.Hosting;using System.ServiceModel.DomainServices.Server;using System.ServiceModel.DomainServices.Server.ApplicationServices;using System.Web;namespace ClinetNetStackTest.Web.Services{    [EnableClientAccess]    public class AuthenticationDomainService : AuthenticationBase<User>    {        // 若要对 Web 应用程序启用 Forms/Windows 身份验证，请编辑 web.config 文件的相应部分。        public string GetOOBUserName()        {            if (HttpContext.Current.Request.Cookies.Count > 0)            {                return HttpContext.Current.Request.Cookies[System.Web.Security.FormsAuthentication.FormsCookieName].Value;            }            else            {                return "Not Send Cookie";            }        }        public bool IsAuthenticated()        {            return HttpContext.Current.User.Identity.IsAuthenticated;        }    }}

调用服务时，各方法之间可以获取身份，但无法实现单点
研究了好几天，只能到此为止。