//******************************************************************************************************
//  SecureDataServiceHostFactory.cs - Gbtc
//
//  Copyright © 2012, Grid Protection Alliance.  All Rights Reserved.
//
//  Licensed to the Grid Protection Alliance (GPA) under one or more contributor license agreements. See
//  the NOTICE file distributed with this work for additional information regarding copyright ownership.
//  The GPA licenses this file to you under the Eclipse Public License -v 1.0 (the "License"); you may
//  not use this file except in compliance with the License. You may obtain a copy of the License at:
//
//      http://www.opensource.org/licenses/eclipse-1.0.php
//
//  Unless agreed to in writing, the subject software distributed under the License is distributed on an
//  "AS-IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. Refer to the
//  License for the specific language governing permissions and limitations.
//
//  Code Modification History:
//  ----------------------------------------------------------------------------------------------------
//  06/09/2011 - Pinal C. Patel
//       Generated original version of source code.
//  12/20/2012 - Starlynn Danyelle Gilliam
//       Modified Header.
//
//******************************************************************************************************

using System;
using System.Collections.Generic;
using System.Data.Services;
using System.IdentityModel.Policy;
using System.ServiceModel;
using System.ServiceModel.Description;

namespace GSF.ServiceModel.Activation
{
    /// <summary>
    /// A service host factory for WCF Data Services that enables role-based security using <see cref="SecurityPolicy"/>.
    /// </summary>
    /// <see cref="SecurityPolicy"/>
    public class SecureDataServiceHostFactory : DataServiceHostFactory
    {
        #region [ Methods ]

        /// <summary>
        /// Creates a new <see cref="DataServiceHost"/> from the URI.
        /// </summary>
        /// <param name="serviceType">Specifies the type of WCF service to host.</param>
        /// <param name="baseAddresses">An array of base addresses for the service.</param>
        /// <returns>New <see cref="DataServiceHost"/>.</returns>
        protected override ServiceHost CreateServiceHost(Type serviceType, Uri[] baseAddresses)
        {
            // Create data service host.
            ServiceHost host = base.CreateServiceHost(serviceType, baseAddresses);

            // Enable security on the data service.
            ServiceAuthorizationBehavior serviceBehavior = host.Description.Behaviors.Find<ServiceAuthorizationBehavior>();
            if (serviceBehavior == null)
            {
                serviceBehavior = new ServiceAuthorizationBehavior();
                host.Description.Behaviors.Add(serviceBehavior);
            }
            serviceBehavior.PrincipalPermissionMode = PrincipalPermissionMode.Custom;
            List<IAuthorizationPolicy> policies = new List<IAuthorizationPolicy>();
            policies.Add((IAuthorizationPolicy)Activator.CreateInstance(typeof(SecurityPolicy)));
            serviceBehavior.ExternalAuthorizationPolicies = policies.AsReadOnly();

            return host;
        }

        #endregion
    }
}