Correct way communicate WSSE Usernametoken for SOAP webservice

by

If you need to send UserName over HTTPS you can use standard approach (if your WSDL is correctly defined this should be created for you automatically by adding service reference):

<bindings>
  <basicHttpBinding>
    <binding name="secured">
      <security mode="TransportWithMessageCredential">
        <message clientCredentialType="UserName" />
      </security>
    </binding>
  </basicHttpBinding>
</bindings>
<client>
  <endpoint name="..." address="https://..." contract="..." binding="basicHttpBinding"
            bindingConfiguration="secured" />
</client>

Ar you can define binding in code:

var basicHttpBinding = new BasicHttpBinding(BasicHttpSecurityMode.TransportWithMessageCredential);
basicHttpBinding.Security.Message.ClientCredentialType = BasicHttpMessageCredentialType.UserName;

You will set credentials in proxy as you do it now:

client.ClientCredentials.UserName.UserName = "bob";
client.ClientCredentials.UserName.Password = "1234";

If you only need UserNameToken profile over HTTP without any other WS-Security infrastructure the simplest approach is using ClearUserNameBinding.

If you need same user name and password for all requests from the client you can use simple basicHttpBinding without any security and include the static header from configuration: 

<client>
  <endpoint ...>
    <headers>
      <wsse:UsernameToken xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" >
        <wsse:Username>Bob</wsse:Username>
        <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">
           1234
        </wsse:Password>
      </wsse:UsernameToken>
    </headers>
  </endpoint>
</client>

If you need anything more complex show the relevant part of WSDL (security assertion) or sample SOAP request. Also mention if you are required to use HTTP or HTTPS.

More Related Contents:

  1. WCF Transport vs Message
  2. Error in WCF client consuming Axis 2 web service with WS-Security UsernameToken PasswordDigest authentication scheme
  3. Authentication Service using WCF
  4. WCF, Interface return type and KnownTypes
  5. How to get the X509Certificate from a client request
  6. Does WCF support WS-Security with SOAP 1.1?
  7. Signing SOAP messages using X.509 certificate from WCF service to Java webservice
  8. C# – How to convert variables? (String, int, etc.) [duplicate]
  9. Configuration System Failed to Initialize
  10. How to call a C# library from Native C++ (using C++\CLI and IJW)
  11. DataContract XML serialization and XML attributes
  12. Understanding WCF Windows Authentication
  13. creating WCF ChannelFactory
  14. How to make a call to my WCF service asynchronous?
  15. How to put a UserControl into Visual Studio toolBox
  16. Different forms of the WCF service contract interface
  17. how to generate a unique token which expires after 24 hours?
  18. CORS Support within WCF REST Services
  19. Detecting Client Death in WCF Duplex Contracts
  20. Is there a format code shortcut for Visual Studio?
  21. Cannot obtain value of local or argument as it is not available at this instruction pointer, possibly because it has been optimized away
  22. When is it appropriate to use the KnownType attribute?
  23. How to programmatically include a file in my project?
  24. VS2010 – How to automatically stop compile on first compile error
  25. The HTTP request is unauthorized with client authentication scheme ‘Negotiate’. The authentication header received from the server was ‘NTLM’
  26. Updating UI in C# using Timer
  27. WCF chokes on properties with no “set “. Any workaround?
  28. WPF C# InputBox
  29. Error while trying to run project:The module was expected to contain an assembly manifest
  30. Could not find a base address that matches scheme net.tcp

Leave a Comment