OnvifServer-CSharp/BaseModule/EC.Onvif/Security/SoapSecurityHeader.cs

using System;
using System.Security.Cryptography;
using System.ServiceModel.Channels;
using System.Text;
using System.Xml;

namespace EC.Onvif.Security
{
	public class SoapSecurityHeader : MessageHeader
	{
		private const string ns_wsu = "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
		private readonly string username;
		private readonly string password;
		private readonly TimeSpan time_shift;

		public override string Name { get; } = "Security";
		public override string Namespace { get; } = "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";

		public SoapSecurityHeader(string username, string password, TimeSpan timeShift)
		{
			this.username = username;
			this.password = password;
			time_shift = timeShift;
		}

		protected override void OnWriteHeaderContents(XmlDictionaryWriter writer, MessageVersion messageVersion)
		{
			var nonce = GetNonce();
			var created = DateTime.UtcNow.Add(time_shift).ToString("yyyy-MM-ddTHH:mm:ss.fffZ");
			var nonce_str = Convert.ToBase64String(nonce);
			string password_hash = PasswordDigest(nonce, created, password);

			writer.WriteStartElement("UsernameToken");

			writer.WriteStartElement("Username");
			writer.WriteValue(username);
			writer.WriteEndElement();

			writer.WriteStartElement("Password");
			writer.WriteAttributeString("Type", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest");
			writer.WriteValue(password_hash);
			writer.WriteEndElement();

			writer.WriteStartElement("Nonce");
			writer.WriteAttributeString("EncodingType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary");
			writer.WriteValue(nonce_str);
			writer.WriteEndElement();

			writer.WriteStartElement("Created");
			writer.WriteXmlnsAttribute("", ns_wsu);
			writer.WriteValue(created);
			writer.WriteEndElement();

			writer.WriteEndElement();
		}

		protected override void OnWriteStartHeader(XmlDictionaryWriter writer, MessageVersion messageVersion)
		{
			writer.WriteStartElement("", Name, Namespace);
			writer.WriteAttributeString("s", "mustUnderstand", "http://www.w3.org/2003/05/soap-envelope", "1");
			writer.WriteXmlnsAttribute("", Namespace);
		}

		private string PasswordDigest(byte[] nonce, string created, string secret)
		{
			byte[] buffer = new byte[nonce.Length + Encoding.ASCII.GetByteCount(created + secret)];

			nonce.CopyTo(buffer, 0);
			Encoding.ASCII.GetBytes(created + password).CopyTo(buffer, nonce.Length);

			return Convert.ToBase64String(SHA1.Create().ComputeHash(buffer));
		}

		private byte[] GetNonce()
		{
			byte[] nonce = new byte[0x10];
			var generator = new RNGCryptoServiceProvider();
			generator.GetBytes(nonce);
			return nonce;
		}
	}
}