IdentitySection.cs source code in C# .NET

                        
Code:
                         / 4.0 / 4.0 / DEVDIV_TFS / Dev10 / Releases / RTMRel / ndp / fx / src / xsp / System / Web / Configuration / IdentitySection.cs / 1305376 / IdentitySection.cs
                        

                        
                            //------------------------------------------------------------------------------ 
// 
//     Copyright (c) Microsoft Corporation.  All rights reserved.
// 
//----------------------------------------------------------------------------- 

namespace System.Web.Configuration { 
    using System; 
    using System.Xml;
    using System.Configuration; 
    using System.Collections.Specialized;
    using System.Collections;
    using System.IO;
    using System.Text; 
    using System.Web.Util;
    using System.Web.Configuration; 
    using System.Security.Permissions; 

        /*        
             
 
*/
    public sealed class IdentitySection : ConfigurationSection { 
        private static ConfigurationPropertyCollection _properties;
        private static readonly ConfigurationProperty _propImpersonate =
            new ConfigurationProperty("impersonate", typeof(bool), false, ConfigurationPropertyOptions.None);
        private static readonly ConfigurationProperty _propUserName = 
            new ConfigurationProperty("userName", typeof(string), String.Empty, ConfigurationPropertyOptions.None);
        private static readonly ConfigurationProperty _propPassword = 
            new ConfigurationProperty("password", typeof(string), String.Empty, ConfigurationPropertyOptions.None); 

        private ImpersonateTokenRef _impersonateTokenRef = new ImpersonateTokenRef(IntPtr.Zero); 

        private string _username;
        private string _password;
        private bool impersonateCache = false; 
        private bool impersonateCached = false; // value not read yet
        private bool _credentialsValidated; 
        private object _credentialsValidatedLock = new object(); 
        private String error = String.Empty;
 
        static IdentitySection() {
            // Property initialization
            _properties = new ConfigurationPropertyCollection();
            _properties.Add(_propImpersonate); 
            _properties.Add(_propUserName);
            _properties.Add(_propPassword); 
        } 

        protected override object GetRuntimeObject() { 
            // VSWhidbey 554776: The method ValidateCredentials() is not safe
            // when multiple threads are accessing it, because the method access
            // and modify member variables.  After reviewing the code,
            // _impersonateTokenRef.Handle is actually cached, so it is safe to 
            // cache the validation result as a whole.  That will avoid
            // ValidateCredentials() to be called with multiple threads. 
            if (!_credentialsValidated) { 
                lock (_credentialsValidatedLock) {
                    if (!_credentialsValidated) { 
                        ValidateCredentials();
                        _credentialsValidated = true;
                    }
                } 
            }
            return base.GetRuntimeObject(); 
        } 

        public IdentitySection() { 
            impersonateCached = false;
        }

        protected override ConfigurationPropertyCollection Properties { 
            get {
                return _properties; 
            } 
        }
 
        [ConfigurationProperty("impersonate", DefaultValue = false)]
        public bool Impersonate {
            get {
                if (impersonateCached == false) { 
                    impersonateCache = (bool)base[_propImpersonate];
                    impersonateCached = true; // value has been read now 
                } 
                return impersonateCache;
            } 
            set {
                base[_propImpersonate] = value;
                impersonateCache = value;
            } 
        }
 
        [ConfigurationProperty("userName", DefaultValue = "")] 
        public string UserName {
            get { 
                return (string)base[_propUserName];
            }
            set {
                base[_propUserName] = value; 
            }
        } 
 
        [ConfigurationProperty("password", DefaultValue = "")]
        public string Password { 
            get {
                return (string)base[_propPassword];
            }
            set { 
                base[_propPassword] = value;
            } 
        } 

        protected override void Reset(ConfigurationElement parentElement) { 
            base.Reset(parentElement);
            IdentitySection parent = parentElement as IdentitySection;
            if (parent != null) {
                _impersonateTokenRef = parent._impersonateTokenRef; 
                // No partial overrides
                if (Impersonate) { 
                    UserName = null; 
                    Password = null;
                    _impersonateTokenRef = new ImpersonateTokenRef(IntPtr.Zero); 
                }
                impersonateCached = false; // We don't want to cache the parent's value!
                _credentialsValidated = false;
            } 
        }
 
        protected override void Unmerge(ConfigurationElement sourceElement, 
                                                ConfigurationElement parentElement,
                                                ConfigurationSaveMode saveMode) { 
            base.Unmerge(sourceElement, parentElement, saveMode); // do this to unmerge locks
            IdentitySection source = sourceElement as IdentitySection;
            if (Impersonate != source.Impersonate) { // this will not be copied by unmerge if it is the same as parent
                Impersonate = source.Impersonate;    // If it is different than expected make sure it is set or validation 
            }                                        // will be missed
            // this section does not inherit in the same manner since partial overrides are not permitted 
            if (Impersonate) // was impersonate set in the merge 
            {
                if (source.ElementInformation.Properties[_propUserName.Name].IsModified || 
                    source.ElementInformation.Properties[_propPassword.Name].IsModified) {
                    UserName = source.UserName;
                    Password = source.Password;
                } 
            }
        } 
        private void ValidateCredentials() { 
            _username = UserName;
            _password = Password; 

            if (HandlerBase.CheckAndReadRegistryValue(ref _username, false) == false) {
                throw new ConfigurationErrorsException(
                    SR.GetString(SR.Invalid_registry_config), 
                    ElementInformation.Source, ElementInformation.LineNumber);
            } 
            if (HandlerBase.CheckAndReadRegistryValue(ref _password, false) == false) { 
                throw new ConfigurationErrorsException(
                    SR.GetString(SR.Invalid_registry_config), 
                    ElementInformation.Source,
                    ElementInformation.LineNumber);
            }
 
            if (_username != null && _username.Length < 1) {
                _username = null; 
            } 

            if (_username != null && Impersonate) { 
                if (_password == null) {
                    _password = String.Empty;
                }
            } 
            else if (_password != null && _username == null && _password.Length > 0 && Impersonate) {
                throw new ConfigurationErrorsException( 
                    SR.GetString(SR.Invalid_credentials), 
                    ElementInformation.Properties["password"].Source,
                    ElementInformation.Properties["password"].LineNumber); 
            }
            if (Impersonate && ImpersonateToken == IntPtr.Zero && _username != null) {
                if (error.Length > 0) {
                    throw new ConfigurationErrorsException( 
                        SR.GetString(SR.Invalid_credentials_2, error),
                        ElementInformation.Properties["userName"].Source, 
                        ElementInformation.Properties["userName"].LineNumber); 
                }
                else { 
                    throw new ConfigurationErrorsException(
                        SR.GetString(SR.Invalid_credentials),
                        ElementInformation.Properties["userName"].Source,
                        ElementInformation.Properties["userName"].LineNumber); 
                }
            } 
        } 

        private void InitializeToken() { 
            error = String.Empty;
            IntPtr token = CreateUserToken(_username, _password, out error);

            _impersonateTokenRef = new ImpersonateTokenRef(token); 

            if (_impersonateTokenRef.Handle == IntPtr.Zero) { 
                if (error.Length > 0) { 
                    throw new ConfigurationErrorsException(
                        SR.GetString(SR.Invalid_credentials_2, error), 
                        ElementInformation.Properties["userName"].Source,
                        ElementInformation.Properties["userName"].LineNumber);
                }
                else { 
                    throw new ConfigurationErrorsException(
                        SR.GetString(SR.Invalid_credentials), 
                        ElementInformation.Properties["userName"].Source, 
                        ElementInformation.Properties["userName"].LineNumber);
                } 
            }
        }

        internal IntPtr ImpersonateToken { 
            get {
                if (_impersonateTokenRef.Handle == IntPtr.Zero) { 
                    if (_username != null && Impersonate) { 
                        InitializeToken();
                    } 
                }
                return _impersonateTokenRef.Handle;
            }
        } 

        internal static IntPtr CreateUserToken(String name, String password, out String error) { 
            IntPtr token = IntPtr.Zero; 
            // when using ASP.NET process model call back via ISAPI
            if (VersionInfo.ExeName == "aspnet_wp") { 
                byte[] bOut = new byte[IntPtr.Size];
                byte[] bIn1 = System.Text.Encoding.Unicode.GetBytes(name + "\t" + password);
                byte[] bIn = new byte[bIn1.Length + 2];
                Buffer.BlockCopy(bIn1, 0, bIn, 0, bIn1.Length); 

                if (UnsafeNativeMethods.PMCallISAPI(IntPtr.Zero, 
                                UnsafeNativeMethods.CallISAPIFunc.GenerateToken, 
                                bIn,
                                bIn.Length, 
                                bOut,
                                bOut.Length) == 1) {
                    Int64 iToken = 0;
                    for (int iter = 0; iter < IntPtr.Size; iter++) { 
                        iToken = iToken * 256 + bOut[iter];
                    } 
                    token = (IntPtr)iToken; 

                    Debug.Trace("Token", "Token " + token + " for (" + name + "," + password + ") obtained via ISAPI"); 
                }
            }
            // try to create the token directly
            if (token == IntPtr.Zero) { 
                StringBuilder errorBuffer = new StringBuilder(256);
                token = UnsafeNativeMethods.CreateUserToken(name, password, 1, errorBuffer, 256); 
                error = errorBuffer.ToString(); 

                if (token != IntPtr.Zero) { 
                    Debug.Trace("Token", "Token " + token + " for (" + name + "," + password + ") obtained directly");
                }
            }
            else { 
                error = String.Empty;
            } 
 
            if (token == IntPtr.Zero) {
                Debug.Trace("Token", "Failed to create token for (" + name + "," + password + ")"); 
            }

            return token;
        } 

        internal ContextInformation ProtectedEvaluationContext { 
            get { 
                return this.EvaluationContext;
            } 
        }
    }
}

// File provided for Reference Use Only by Microsoft Corporation (c) 2007.
//------------------------------------------------------------------------------ 
// 
//     Copyright (c) Microsoft Corporation.  All rights reserved.
// 
//----------------------------------------------------------------------------- 

namespace System.Web.Configuration { 
    using System; 
    using System.Xml;
    using System.Configuration; 
    using System.Collections.Specialized;
    using System.Collections;
    using System.IO;
    using System.Text; 
    using System.Web.Util;
    using System.Web.Configuration; 
    using System.Security.Permissions; 

        /*        
             
 
*/
    public sealed class IdentitySection : ConfigurationSection { 
        private static ConfigurationPropertyCollection _properties;
        private static readonly ConfigurationProperty _propImpersonate =
            new ConfigurationProperty("impersonate", typeof(bool), false, ConfigurationPropertyOptions.None);
        private static readonly ConfigurationProperty _propUserName = 
            new ConfigurationProperty("userName", typeof(string), String.Empty, ConfigurationPropertyOptions.None);
        private static readonly ConfigurationProperty _propPassword = 
            new ConfigurationProperty("password", typeof(string), String.Empty, ConfigurationPropertyOptions.None); 

        private ImpersonateTokenRef _impersonateTokenRef = new ImpersonateTokenRef(IntPtr.Zero); 

        private string _username;
        private string _password;
        private bool impersonateCache = false; 
        private bool impersonateCached = false; // value not read yet
        private bool _credentialsValidated; 
        private object _credentialsValidatedLock = new object(); 
        private String error = String.Empty;
 
        static IdentitySection() {
            // Property initialization
            _properties = new ConfigurationPropertyCollection();
            _properties.Add(_propImpersonate); 
            _properties.Add(_propUserName);
            _properties.Add(_propPassword); 
        } 

        protected override object GetRuntimeObject() { 
            // VSWhidbey 554776: The method ValidateCredentials() is not safe
            // when multiple threads are accessing it, because the method access
            // and modify member variables.  After reviewing the code,
            // _impersonateTokenRef.Handle is actually cached, so it is safe to 
            // cache the validation result as a whole.  That will avoid
            // ValidateCredentials() to be called with multiple threads. 
            if (!_credentialsValidated) { 
                lock (_credentialsValidatedLock) {
                    if (!_credentialsValidated) { 
                        ValidateCredentials();
                        _credentialsValidated = true;
                    }
                } 
            }
            return base.GetRuntimeObject(); 
        } 

        public IdentitySection() { 
            impersonateCached = false;
        }

        protected override ConfigurationPropertyCollection Properties { 
            get {
                return _properties; 
            } 
        }
 
        [ConfigurationProperty("impersonate", DefaultValue = false)]
        public bool Impersonate {
            get {
                if (impersonateCached == false) { 
                    impersonateCache = (bool)base[_propImpersonate];
                    impersonateCached = true; // value has been read now 
                } 
                return impersonateCache;
            } 
            set {
                base[_propImpersonate] = value;
                impersonateCache = value;
            } 
        }
 
        [ConfigurationProperty("userName", DefaultValue = "")] 
        public string UserName {
            get { 
                return (string)base[_propUserName];
            }
            set {
                base[_propUserName] = value; 
            }
        } 
 
        [ConfigurationProperty("password", DefaultValue = "")]
        public string Password { 
            get {
                return (string)base[_propPassword];
            }
            set { 
                base[_propPassword] = value;
            } 
        } 

        protected override void Reset(ConfigurationElement parentElement) { 
            base.Reset(parentElement);
            IdentitySection parent = parentElement as IdentitySection;
            if (parent != null) {
                _impersonateTokenRef = parent._impersonateTokenRef; 
                // No partial overrides
                if (Impersonate) { 
                    UserName = null; 
                    Password = null;
                    _impersonateTokenRef = new ImpersonateTokenRef(IntPtr.Zero); 
                }
                impersonateCached = false; // We don't want to cache the parent's value!
                _credentialsValidated = false;
            } 
        }
 
        protected override void Unmerge(ConfigurationElement sourceElement, 
                                                ConfigurationElement parentElement,
                                                ConfigurationSaveMode saveMode) { 
            base.Unmerge(sourceElement, parentElement, saveMode); // do this to unmerge locks
            IdentitySection source = sourceElement as IdentitySection;
            if (Impersonate != source.Impersonate) { // this will not be copied by unmerge if it is the same as parent
                Impersonate = source.Impersonate;    // If it is different than expected make sure it is set or validation 
            }                                        // will be missed
            // this section does not inherit in the same manner since partial overrides are not permitted 
            if (Impersonate) // was impersonate set in the merge 
            {
                if (source.ElementInformation.Properties[_propUserName.Name].IsModified || 
                    source.ElementInformation.Properties[_propPassword.Name].IsModified) {
                    UserName = source.UserName;
                    Password = source.Password;
                } 
            }
        } 
        private void ValidateCredentials() { 
            _username = UserName;
            _password = Password; 

            if (HandlerBase.CheckAndReadRegistryValue(ref _username, false) == false) {
                throw new ConfigurationErrorsException(
                    SR.GetString(SR.Invalid_registry_config), 
                    ElementInformation.Source, ElementInformation.LineNumber);
            } 
            if (HandlerBase.CheckAndReadRegistryValue(ref _password, false) == false) { 
                throw new ConfigurationErrorsException(
                    SR.GetString(SR.Invalid_registry_config), 
                    ElementInformation.Source,
                    ElementInformation.LineNumber);
            }
 
            if (_username != null && _username.Length < 1) {
                _username = null; 
            } 

            if (_username != null && Impersonate) { 
                if (_password == null) {
                    _password = String.Empty;
                }
            } 
            else if (_password != null && _username == null && _password.Length > 0 && Impersonate) {
                throw new ConfigurationErrorsException( 
                    SR.GetString(SR.Invalid_credentials), 
                    ElementInformation.Properties["password"].Source,
                    ElementInformation.Properties["password"].LineNumber); 
            }
            if (Impersonate && ImpersonateToken == IntPtr.Zero && _username != null) {
                if (error.Length > 0) {
                    throw new ConfigurationErrorsException( 
                        SR.GetString(SR.Invalid_credentials_2, error),
                        ElementInformation.Properties["userName"].Source, 
                        ElementInformation.Properties["userName"].LineNumber); 
                }
                else { 
                    throw new ConfigurationErrorsException(
                        SR.GetString(SR.Invalid_credentials),
                        ElementInformation.Properties["userName"].Source,
                        ElementInformation.Properties["userName"].LineNumber); 
                }
            } 
        } 

        private void InitializeToken() { 
            error = String.Empty;
            IntPtr token = CreateUserToken(_username, _password, out error);

            _impersonateTokenRef = new ImpersonateTokenRef(token); 

            if (_impersonateTokenRef.Handle == IntPtr.Zero) { 
                if (error.Length > 0) { 
                    throw new ConfigurationErrorsException(
                        SR.GetString(SR.Invalid_credentials_2, error), 
                        ElementInformation.Properties["userName"].Source,
                        ElementInformation.Properties["userName"].LineNumber);
                }
                else { 
                    throw new ConfigurationErrorsException(
                        SR.GetString(SR.Invalid_credentials), 
                        ElementInformation.Properties["userName"].Source, 
                        ElementInformation.Properties["userName"].LineNumber);
                } 
            }
        }

        internal IntPtr ImpersonateToken { 
            get {
                if (_impersonateTokenRef.Handle == IntPtr.Zero) { 
                    if (_username != null && Impersonate) { 
                        InitializeToken();
                    } 
                }
                return _impersonateTokenRef.Handle;
            }
        } 

        internal static IntPtr CreateUserToken(String name, String password, out String error) { 
            IntPtr token = IntPtr.Zero; 
            // when using ASP.NET process model call back via ISAPI
            if (VersionInfo.ExeName == "aspnet_wp") { 
                byte[] bOut = new byte[IntPtr.Size];
                byte[] bIn1 = System.Text.Encoding.Unicode.GetBytes(name + "\t" + password);
                byte[] bIn = new byte[bIn1.Length + 2];
                Buffer.BlockCopy(bIn1, 0, bIn, 0, bIn1.Length); 

                if (UnsafeNativeMethods.PMCallISAPI(IntPtr.Zero, 
                                UnsafeNativeMethods.CallISAPIFunc.GenerateToken, 
                                bIn,
                                bIn.Length, 
                                bOut,
                                bOut.Length) == 1) {
                    Int64 iToken = 0;
                    for (int iter = 0; iter < IntPtr.Size; iter++) { 
                        iToken = iToken * 256 + bOut[iter];
                    } 
                    token = (IntPtr)iToken; 

                    Debug.Trace("Token", "Token " + token + " for (" + name + "," + password + ") obtained via ISAPI"); 
                }
            }
            // try to create the token directly
            if (token == IntPtr.Zero) { 
                StringBuilder errorBuffer = new StringBuilder(256);
                token = UnsafeNativeMethods.CreateUserToken(name, password, 1, errorBuffer, 256); 
                error = errorBuffer.ToString(); 

                if (token != IntPtr.Zero) { 
                    Debug.Trace("Token", "Token " + token + " for (" + name + "," + password + ") obtained directly");
                }
            }
            else { 
                error = String.Empty;
            } 
 
            if (token == IntPtr.Zero) {
                Debug.Trace("Token", "Failed to create token for (" + name + "," + password + ")"); 
            }

            return token;
        } 

        internal ContextInformation ProtectedEvaluationContext { 
            get { 
                return this.EvaluationContext;
            } 
        }
    }
}

// File provided for Reference Use Only by Microsoft Corporation (c) 2007.

                        

                        

                        
                        

Link Menu

This book is available now!
Buy at Amazon US or
Buy at Amazon UK

• SortedList.cs
• xmlfixedPageInfo.cs
• FileLevelControlBuilderAttribute.cs
• DockPattern.cs
• SwitchElementsCollection.cs
• __Filters.cs
• Component.cs
• SymLanguageType.cs
• Int16Animation.cs
• ScrollBarRenderer.cs
• SqlDataSourceCache.cs
• BitmapImage.cs
• AssociationSet.cs
• ScriptBehaviorDescriptor.cs
• MasterPageParser.cs
• UriScheme.cs
• PropertyGridEditorPart.cs
• X509SecurityToken.cs
• FillRuleValidation.cs
• ChildTable.cs
• graph.cs
• GPPOINT.cs
• MsmqProcessProtocolHandler.cs
• MemberAssignment.cs
• XpsFilter.cs
• BookmarkInfo.cs
• ConfigUtil.cs
• DataGridItemAutomationPeer.cs
• RuleRefElement.cs
• StoryFragments.cs
• HandlerMappingMemo.cs
• ConditionValidator.cs
• Error.cs
• QuaternionConverter.cs
• MoveSizeWinEventHandler.cs
• WindowsGraphicsWrapper.cs
• BindingGraph.cs
• EventEntry.cs
• UnsafeMethods.cs
• ErrorStyle.cs
• CookieParameter.cs
• DataExpression.cs
• PathFigureCollectionConverter.cs
• HScrollBar.cs
• ForeignConstraint.cs
• NetworkStream.cs
• AdCreatedEventArgs.cs
• DataListItemCollection.cs
• DatatypeImplementation.cs
• UnescapedXmlDiagnosticData.cs
• BitmapScalingModeValidation.cs
• TypeContext.cs
• DocumentManager.cs
• DataGridViewRowsRemovedEventArgs.cs
• CommandID.cs
• HttpException.cs
• oledbconnectionstring.cs
• ImageSourceValueSerializer.cs
• PipeException.cs
• SetterBaseCollection.cs
• _ConnectStream.cs
• ConfigurationSectionGroupCollection.cs
• SerializationInfoEnumerator.cs
• ReaderWriterLockWrapper.cs
• InProcStateClientManager.cs
• XmlSchemaAnnotated.cs
• GestureRecognizer.cs
• XPathAncestorIterator.cs
• ProfilePropertyMetadata.cs
• ReceiveSecurityHeaderEntry.cs
• VScrollBar.cs
• Speller.cs
• UniformGrid.cs
• ErrorRuntimeConfig.cs
• SymmetricSecurityBindingElement.cs
• ToolTipAutomationPeer.cs
• KeyboardDevice.cs
• UInt64Converter.cs
• ISFTagAndGuidCache.cs
• securitycriticaldataformultiplegetandset.cs
• TransformerConfigurationWizardBase.cs
• FilteredAttributeCollection.cs
• DelegateSerializationHolder.cs
• DefinitionBase.cs
• SchemeSettingElementCollection.cs
• CompressedStack.cs
• XPathNodeInfoAtom.cs
• HandledEventArgs.cs
• _SslState.cs
• ScriptComponentDescriptor.cs
• TextDecorationCollection.cs
• TextEditorTables.cs
• XmlNavigatorStack.cs
• SqlAggregateChecker.cs
• FileCodeGroup.cs
• X509Certificate2.cs
• ActivityWithResultWrapper.cs
• _FtpDataStream.cs
• XPathScanner.cs
• DataTemplate.cs