Code:
/ FX-1434 / FX-1434 / 1.0 / untmp / whidbey / REDBITS / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } }
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- XamlVector3DCollectionSerializer.cs
- GroupItemAutomationPeer.cs
- InputLanguageEventArgs.cs
- ObjectViewEntityCollectionData.cs
- PropVariant.cs
- EntityDataSourceViewSchema.cs
- CodeActivity.cs
- X509SubjectKeyIdentifierClause.cs
- SBCSCodePageEncoding.cs
- Int32Rect.cs
- CultureTableRecord.cs
- SqlDependencyUtils.cs
- CapiSafeHandles.cs
- DBBindings.cs
- PageCache.cs
- MouseDevice.cs
- FileVersion.cs
- oledbmetadatacolumnnames.cs
- Registry.cs
- DataViewSettingCollection.cs
- ColumnResizeAdorner.cs
- TCPListener.cs
- MemberInfoSerializationHolder.cs
- MultiSelector.cs
- CodeTypeDeclarationCollection.cs
- DataPointer.cs
- IndexObject.cs
- OrderByQueryOptionExpression.cs
- IndexedString.cs
- XamlWrappingReader.cs
- DataGridPageChangedEventArgs.cs
- BitStream.cs
- ToolStripSeparator.cs
- PreservationFileWriter.cs
- StandardToolWindows.cs
- StandardBindingOptionalReliableSessionElement.cs
- BulletedListEventArgs.cs
- InvokeGenerator.cs
- Itemizer.cs
- ApplicationSecurityManager.cs
- BufferedReadStream.cs
- ObjectViewEntityCollectionData.cs
- ChannelTerminatedException.cs
- Polyline.cs
- Rect3DValueSerializer.cs
- TextTrailingCharacterEllipsis.cs
- TextEvent.cs
- ADMembershipUser.cs
- XamlSerializationHelper.cs
- SmtpMail.cs
- HtmlFormParameterWriter.cs
- XmlILStorageConverter.cs
- FontConverter.cs
- XmlAnyElementAttributes.cs
- DataServices.cs
- BitmapFrameDecode.cs
- SettingsProperty.cs
- XmlSchemaFacet.cs
- DependencyPropertyValueSerializer.cs
- MemberDescriptor.cs
- OptimisticConcurrencyException.cs
- HtmlPageAdapter.cs
- ShaderEffect.cs
- IssuedTokenClientCredential.cs
- PriorityQueue.cs
- InfocardExtendedInformationEntry.cs
- ProcessRequestArgs.cs
- PrimaryKeyTypeConverter.cs
- RuntimeCompatibilityAttribute.cs
- PointConverter.cs
- HitTestResult.cs
- ToolboxCategory.cs
- ButtonColumn.cs
- WebConfigurationFileMap.cs
- DataBoundControl.cs
- AssemblyFilter.cs
- CodeNamespace.cs
- XmlnsCache.cs
- XmlDomTextWriter.cs
- Transform3D.cs
- RSAOAEPKeyExchangeDeformatter.cs
- RoleServiceManager.cs
- WindowsEditBoxRange.cs
- SamlDoNotCacheCondition.cs
- MenuItem.cs
- PropertyCondition.cs
- ExceptionHandlers.cs
- LocatorBase.cs
- TextServicesPropertyRanges.cs
- SafeTokenHandle.cs
- CompiledRegexRunnerFactory.cs
- XsltLoader.cs
- UdpTransportSettingsElement.cs
- SecurityElement.cs
- CharacterHit.cs
- QilGenerator.cs
- DataServices.cs
- HttpProfileBase.cs
- LoginUtil.cs
- MatrixAnimationUsingPath.cs