You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
82 lines
2.7 KiB
82 lines
2.7 KiB
using System;
|
|
using System.Security.Cryptography;
|
|
using System.ServiceModel.Channels;
|
|
using System.Text;
|
|
using System.Xml;
|
|
|
|
namespace EC.Onvif.Security
|
|
{
|
|
public class SoapSecurityHeader : MessageHeader
|
|
{
|
|
const string ns_wsu = "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
|
|
readonly string username;
|
|
readonly string password;
|
|
readonly TimeSpan time_shift;
|
|
|
|
public override string Name { get; } = "Security";
|
|
public override string Namespace { get; } = "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
|
|
|
|
public SoapSecurityHeader(string username, string password, TimeSpan timeShift)
|
|
{
|
|
this.username = username;
|
|
this.password = password;
|
|
time_shift = timeShift;
|
|
}
|
|
|
|
protected override void OnWriteHeaderContents(XmlDictionaryWriter writer, MessageVersion messageVersion)
|
|
{
|
|
var nonce = GetNonce();
|
|
var created = DateTime.UtcNow.Add(time_shift).ToString("yyyy-MM-ddTHH:mm:ss.fffZ");
|
|
var nonce_str = Convert.ToBase64String(nonce);
|
|
string password_hash = PasswordDigest(nonce, created, password);
|
|
|
|
writer.WriteStartElement("UsernameToken");
|
|
|
|
writer.WriteStartElement("Username");
|
|
writer.WriteValue(username);
|
|
writer.WriteEndElement();
|
|
|
|
writer.WriteStartElement("Password");
|
|
writer.WriteAttributeString("Type", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest");
|
|
writer.WriteValue(password_hash);
|
|
writer.WriteEndElement();
|
|
|
|
writer.WriteStartElement("Nonce");
|
|
writer.WriteAttributeString("EncodingType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary");
|
|
writer.WriteValue(nonce_str);
|
|
writer.WriteEndElement();
|
|
|
|
writer.WriteStartElement("Created");
|
|
writer.WriteXmlnsAttribute("", ns_wsu);
|
|
writer.WriteValue(created);
|
|
writer.WriteEndElement();
|
|
|
|
writer.WriteEndElement();
|
|
}
|
|
|
|
protected override void OnWriteStartHeader(XmlDictionaryWriter writer, MessageVersion messageVersion)
|
|
{
|
|
writer.WriteStartElement("", Name, Namespace);
|
|
writer.WriteAttributeString("s", "mustUnderstand", "http://www.w3.org/2003/05/soap-envelope", "1");
|
|
writer.WriteXmlnsAttribute("", Namespace);
|
|
}
|
|
|
|
string PasswordDigest(byte[] nonce, string created, string secret)
|
|
{
|
|
byte[] buffer = new byte[nonce.Length + Encoding.ASCII.GetByteCount(created + secret)];
|
|
|
|
nonce.CopyTo(buffer, 0);
|
|
Encoding.ASCII.GetBytes(created + password).CopyTo(buffer, nonce.Length);
|
|
|
|
return Convert.ToBase64String(SHA1.Create().ComputeHash(buffer));
|
|
}
|
|
|
|
byte[] GetNonce()
|
|
{
|
|
byte[] nonce = new byte[0x10];
|
|
var generator = new RNGCryptoServiceProvider();
|
|
generator.GetBytes(nonce);
|
|
return nonce;
|
|
}
|
|
}
|
|
}
|