//******************************************************************************************************// IgnoreServicesSecurityModule.cs - Gbtc//// Copyright © 2012, Grid Protection Alliance. All Rights Reserved.//// Licensed to the Grid Protection Alliance (GPA) under one or more contributor license agreements. See// the NOTICE file distributed with this work for additional information regarding copyright ownership.// The GPA licenses this file to you under the MIT License (MIT), the "License"; you may// not use this file except in compliance with the License. You may obtain a copy of the License at://// http://www.opensource.org/licenses/MIT//// Unless agreed to in writing, the subject software distributed under the License is distributed on an// "AS-IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. Refer to the// License for the specific language governing permissions and limitations.//// Code Modification History:// ----------------------------------------------------------------------------------------------------// 03/31/2010 - Pinal C. Patel// Generated original version of source code.// 01/08/2015 - Pinal C. Patel// Update to get WCF services path from config file rather than assuming services will have .svc // extension.////****************************************************************************************************** using GSF.Configuration;using GSF.Security;using System.Web; namespace GSF.Web{ /// <summary> /// Represents an <see cref="IHttpModule">HTTP module</see> that can be used to enable site-wide role-based security except for WCF services. /// </summary> public class IgnoreServicesSecurityModule : SecurityModule { #region [ Members ] //Constants private const string DefaultWebServicesPath = "*.svc"; #endregion #region [ Methods ] /// <summary> /// Determines if access to the requested <paramref name="resource"/> is to be secured. /// </summary> /// <param name="resource">Name of the resource being requested.</param> /// <returns>True if access to the resource is to be secured, otherwise False.</returns> protected override bool IsAccessSecured(string resource) { if (SecurityProviderUtility.IsRegexMatch(s_webServicesPath, resource)) // Don't secure WCF services. return false; else // Fallback to the base class for everything else. return base.IsAccessSecured(resource); } #endregion #region [ Static ] // Static Fields private static string s_webServicesPath; // Static Constructor static IgnoreServicesSecurityModule() { // Load settings from the specified category. ConfigurationFile config = ConfigurationFile.Current; CategorizedSettingsElementCollection settings = config.Settings[SecurityProviderBase.DefaultSettingsCategory]; settings.Add("WebServicesPath", DefaultWebServicesPath, "Path to WCF web services that are to be ignored by the security module and secured by downstream WCF Authorization Policy."); s_webServicesPath = settings["WebServicesPath"].ValueAs(DefaultWebServicesPath); } #endregion }}
//******************************************************************************************************
// IgnoreServicesSecurityModule.cs - Gbtc
//
// Copyright © 2012, Grid Protection Alliance. All Rights Reserved.
//
// Licensed to the Grid Protection Alliance (GPA) under one or more contributor license agreements. See
// the NOTICE file distributed with this work for additional information regarding copyright ownership.
// The GPA licenses this file to you under the MIT License (MIT), the "License"; you may
// not use this file except in compliance with the License. You may obtain a copy of the License at:
//
// http://www.opensource.org/licenses/MIT
//
// Unless agreed to in writing, the subject software distributed under the License is distributed on an
// "AS-IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. Refer to the
// License for the specific language governing permissions and limitations.
//
// Code Modification History:
// ----------------------------------------------------------------------------------------------------
// 03/31/2010 - Pinal C. Patel
// Generated original version of source code.
// 01/08/2015 - Pinal C. Patel
// Update to get WCF services path from config file rather than assuming services will have .svc
// extension.
//
//******************************************************************************************************
using GSF.Configuration;
using GSF.Security;
using System.Web;
namespace GSF.Web
{
/// <summary>
/// Represents an <see cref="IHttpModule">HTTP module</see> that can be used to enable site-wide role-based security except for WCF services.
/// </summary>
public class IgnoreServicesSecurityModule : SecurityModule
{
#region [ Members ]
//Constants
private const string DefaultWebServicesPath = "*.svc";
#endregion
#region [ Methods ]
/// <summary>
/// Determines if access to the requested <paramref name="resource"/> is to be secured.
/// </summary>
/// <param name="resource">Name of the resource being requested.</param>
/// <returns>True if access to the resource is to be secured, otherwise False.</returns>
protected override bool IsAccessSecured(string resource)
{
if (SecurityProviderUtility.IsRegexMatch(s_webServicesPath, resource))
// Don't secure WCF services.
return false;
else
// Fallback to the base class for everything else.
return base.IsAccessSecured(resource);
}
#endregion
#region [ Static ]
// Static Fields
private static string s_webServicesPath;
// Static Constructor
static IgnoreServicesSecurityModule()
{
// Load settings from the specified category.
ConfigurationFile config = ConfigurationFile.Current;
CategorizedSettingsElementCollection settings = config.Settings[SecurityProviderBase.DefaultSettingsCategory];
settings.Add("WebServicesPath", DefaultWebServicesPath, "Path to WCF web services that are to be ignored by the security module and secured by downstream WCF Authorization Policy.");
s_webServicesPath = settings["WebServicesPath"].ValueAs(DefaultWebServicesPath);
}
#endregion
}
}