Forums → Programming Forum → Finding the identity of someone logged on a website through WCF

0	4741

offline

gilbert211

1 posts

Nomad

Posted October 7, '16 7:20am UTC

I have a website running with ASP.Net hosted in asphostportal.com, and it's working fine. I also have a WCF service running which is supposed to act as an API for applications implemented onto the website (in my case games). Now my problem is that I want my applications to be able to call the WCF and return the user currently logged onto the website through my database solution, and I can't find a way to do this for the life of me. I've tried using:

But this seems to not have a value (null) when it's called by a session logged in on the website. I want my WCF to be able to update things like highscores etc. based upon who is logged in while running the applications, and this is kinda impossible as far as I know if I can't grab the identity of the person who is logged in. This is how I tried to test this out:

web.config:

All information I seem to find on the subject is related to standard authentication of users where you provide the credentials, while my issue is finding the credentials of someone logged onto my website.

I was looking at the problem from the wrong angle. This is how I am trying to fix it currently: I am generating a SessionId when the user visits a page holding an application, which holds information about the application ID, the user ID visiting the page, and the expiration date of the session (current date + time). You can apparantly forward information directly to .swf files you host (i.e: http://helpx.adobe.com/flash/kb/pass-variables-swfs-flashvars.html), so I pass the sessionId of the user to the application, which the application dev can then use to access the name of the user in the database by passing the sessionId to a SQL query which returns the acquainted user ID (could make it return the name as well, but the ID is more useful in my case). I will update with an answer if I make this solution work.

OperationContext.Current.ServiceSecurityContext.PrimaryIdentity.Name;

[code]OperationContext.Current.ServiceSecurityContext.PrimaryIdentity.Name;[/code]

[code]protected void Page_Load(object sender, EventArgs e)
{
    APIHostClient client = new APIHostClient();
    client.Open();
    String name = client.GetUserName();
    Label.Text = name;
    client.Close();
}

// on the wcf side 
public String GetUserName()
    {
        String userName = OperationContext.Current.ServiceSecurityContext.PrimaryIdentity.Name;
        return userName;
    }[/code]
web.config:
[code]<system.serviceModel>
    <bindings>
      <basicHttpBinding>
        <binding name="BasicHttpBinding_IAPIHost" >
          <security mode ="TransportWithMessageCredential">
            <transport clientCredentialType="None"/>
            <message clientCredentialType="UserName"/>
          </security>
        </binding>
      </basicHttpBinding>
    </bindings>
    <client>
      <endpoint address="https://localhost:2105/APIHost.svc" binding="basicHttpBinding"
        bindingConfiguration="BasicHttpBinding_IAPIHost" contract="ServiceReference1.IAPIHost"
        name="BasicHttpBinding_IAPIHost" />
    </client>
    <services>
      <service behaviorConfiguration="behavior" name="ICanHasGamez.APIHost">
        <endpoint address="" binding="basicHttpBinding" contract="ICanHasGamez.IAPIHost">
          <identity>
            <dns value="localhost" />
          </identity>
        </endpoint>
        <endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />
      </service>

</services>
    <behaviors>
      <serviceBehaviors>
        <behavior name="behavior">
          <serviceMetadata httpGetEnabled="true" httpsGetEnabled="true" />
          <serviceCredentials>
            <serviceCertificate findValue="localhost" storeLocation="LocalMachine" storeName="My" x509FindType="FindBySubjectName"/>
            <userNameAuthentication userNamePasswordValidationMode="Custom" customUserNamePasswordValidatorType="WcfService.SecurityValidator, WcfService"/>
          </serviceCredentials>
          <serviceDebug includeExceptionDetailInFaults="true" />
        </behavior>
      </serviceBehaviors>
    </behaviors>
    <serviceHostingEnvironment aspNetCompatibilityEnabled="true"
      multipleSiteBindingsEnabled="true" />
  </system.serviceModel>[/code]

0 Replies

Showing 1-0 of 0

Categories

Quests

Community

Forums → Programming Forum → Finding the identity of someone logged on a website through WCF