Silverlight+WCF登录验证源代码下载

对于简单的安全性不高的wcf如果寄宿在IIS中wcf的验证完全可基于asp.net 的窗体验证http://blog.csdn.net/shanyou/archive/2009/09/06/4680978.aspx
该文对“WCF服务中操作FormsAuthentication的Cookie”操作有详细的说明

C# code

//建立user wcf锲约     [ServiceContract(Namespace = "")]      public interface IUser    {        [OperationContract]        LoginMessage DoWork(string name);        [OperationContract]        LoginMessage Login(string username, string pass);        [OperationContract]        void SignOut();    }    /// <summary>    /// login DataContract    /// </summary>    [DataContract]    public class LoginMessage    {              [DataMember]        public string Text;    }  //实现接口  // 注意: 如果更改此处的类名 "User"，也必须更新 App.config 中对 "User" 的引用。    [AspNetCompatibilityRequirements(RequirementsMode = AspNetCompatibilityRequirementsMode.Allowed)]    public class User : IUser    {        public LoginMessage DoWork(string name)        {            LoginMessage a = new LoginMessage();            if (UserAuthenticate.isAuthenticate())            {                a.Text = "hello " + HttpContext.Current.User.Identity.Name.Trim();            }            else             {                a.Text="notlogin";            }            return a;        }        public LoginMessage Login(string username, string pass)        {            LoginMessage a = new LoginMessage();            if (username == "xgr2004" && pass == "123456")            {                 UserAuthenticate.VerifyUser(username, pass);                a.Text= "true";            }            else            {                a.Text = "false";            }            return a;        }         public void SignOut()        {            UserAuthenticate.SignOut();        }  //验证部分，这里拷了我给出连接    public   class UserAuthenticate    {      static  public string VerifyUser(string username, string password)       {                        System.Web.Security.FormsAuthentication.SetAuthCookie(username, true);               // 创建验证票               System.Web.Configuration.FormsAuthenticationConfiguration formsConfig = new System.Web.Configuration.FormsAuthenticationConfiguration();               FormsAuthenticationTicket formAuthTicket = new                   FormsAuthenticationTicket(                           1,                              // 版本                           username,                          // 用户名称                           DateTime.Now,                   // 创建时间                           DateTime.Now.AddMinutes(formsConfig.Timeout.TotalMinutes),    // 失效时间                           true,"");    // 用户数据                //加密票               string encryptedTicket = FormsAuthentication.Encrypt(formAuthTicket);               // 以加密票的密文存入Cookie               HttpCookie authCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);                authCookie.HttpOnly = true;               authCookie.Path = FormsAuthentication.FormsCookiePath;               authCookie.Secure = FormsAuthentication.RequireSSL;               if (FormsAuthentication.CookieDomain != null)               {                   authCookie.Domain = FormsAuthentication.CookieDomain;               }               if (formAuthTicket.IsPersistent)               {                   authCookie.Expires = formAuthTicket.Expiration;               }                           HttpContext.Current.Response.Cookies.Add(authCookie);               FormsIdentity identity = new FormsIdentity(formAuthTicket);               GenericPrincipal principal = new GenericPrincipal(identity, null);               HttpContext.Current.User = principal;                              return "";               return null;                }      static public bool isAuthenticate()      {        return  HttpContext.Current.User.Identity.IsAuthenticated;              }       static public void SignOut()       {        FormsAuthentication.SignOut();        HttpContext.Current.Session.Clear();             }    }

源代码下载

代码的相关介绍：
网上查阅了相关WCF的例子，一般都要证书，对于简单的安全性不高的wcf如果寄宿在IIS中wcf的验证完全可基于asp.net 的窗体验证http://blog.csdn.net/shanyou/archive/2009/09/06/4680978.aspx
该文对“WCF服务中操作FormsAuthentication的Cookie”操作有详细的说明

C# code

//建立user wcf锲约     [ServiceContract(Namespace = "")]      public interface IUser    {        [OperationContract]        LoginMessage DoWork(string name);        [OperationContract]        LoginMessage Login(string username, string pass);        [OperationContract]        void SignOut();    }    /// <summary>    /// login DataContract    /// </summary>    [DataContract]    public class LoginMessage    {              [DataMember]        public string Text;    }  //实现接口  // 注意: 如果更改此处的类名 "User"，也必须更新 App.config 中对 "User" 的引用。    [AspNetCompatibilityRequirements(RequirementsMode = AspNetCompatibilityRequirementsMode.Allowed)]    public class User : IUser    {        public LoginMessage DoWork(string name)        {            LoginMessage a = new LoginMessage();            if (UserAuthenticate.isAuthenticate())            {                a.Text = "hello " + HttpContext.Current.User.Identity.Name.Trim();            }            else             {                a.Text="notlogin";            }            return a;        }        public LoginMessage Login(string username, string pass)        {            LoginMessage a = new LoginMessage();            if (username == "xgr2004" && pass == "123456")            {                 UserAuthenticate.VerifyUser(username, pass);                a.Text= "true";            }            else            {                a.Text = "false";            }            return a;        }         public void SignOut()        {            UserAuthenticate.SignOut();        }  //验证部分，这里拷了我给出连接    public   class UserAuthenticate    {      static  public string VerifyUser(string username, string password)       {                        System.Web.Security.FormsAuthentication.SetAuthCookie(username, true);               // 创建验证票               System.Web.Configuration.FormsAuthenticationConfiguration formsConfig = new System.Web.Configuration.FormsAuthenticationConfiguration();               FormsAuthenticationTicket formAuthTicket = new                   FormsAuthenticationTicket(                           1,                              // 版本                           username,                          // 用户名称                           DateTime.Now,                   // 创建时间                           DateTime.Now.AddMinutes(formsConfig.Timeout.TotalMinutes),    // 失效时间                           true,"");    // 用户数据                //加密票               string encryptedTicket = FormsAuthentication.Encrypt(formAuthTicket);               // 以加密票的密文存入Cookie               HttpCookie authCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket);                authCookie.HttpOnly = true;               authCookie.Path = FormsAuthentication.FormsCookiePath;               authCookie.Secure = FormsAuthentication.RequireSSL;               if (FormsAuthentication.CookieDomain != null)               {                   authCookie.Domain = FormsAuthentication.CookieDomain;               }               if (formAuthTicket.IsPersistent)               {                   authCookie.Expires = formAuthTicket.Expiration;               }                           HttpContext.Current.Response.Cookies.Add(authCookie);               FormsIdentity identity = new FormsIdentity(formAuthTicket);               GenericPrincipal principal = new GenericPrincipal(identity, null);               HttpContext.Current.User = principal;                              return "";               return null;                }      static public bool isAuthenticate()      {        return  HttpContext.Current.User.Identity.IsAuthenticated;              }       static public void SignOut()       {        FormsAuthentication.SignOut();        HttpContext.Current.Session.Clear();             }    }

 

当点击登陆，用户名为xgr2004时就登陆，成功登陆后然后点操作就会显示hello name的说明

反之如果没有登陆就显示notlogin

转载：http://www.cnblogs.com/Guroer/archive/2010/01/30/1660214.html