c# - Thinktecture - Unable to handle an encrypted SAML security token in Web API -

-

in .net web api, how can configure thinktechture saml2securitytokenhandler use x509 certificate handle encrypted saml2 security token (decrypt before validating).

the token encrypted identity server configuring rp use certificate encrypting.

below working configuration (without handling encrypted token) taken thinktechture samples:

  #region identityserver saml   authentication.addsaml2(                 issuerthumbprint: constants.idsrv.signingcertthumbprint,                 issuername: constants.idsrv.issueruri,                 audienceuri: constants.realm,                 certificatevalidator: x509certificatevalidator.none,                 options: authenticationoptions.forauthorizationheader(constants.idsrv.samlscheme),                 scheme: authenticationscheme.schemeonly(constants.idsrv.samlscheme));   #endregion

to enable encrypted tokens web api, found helpful: http://www.alexthissen.nl/blogs/main/archive/2011/07/18/using-active-profile-for.aspx

towards end you'll see code setting servicetokenresolver property on configuration property of securitytokenhandlercollection using x509 certificate localmachine store. configuration property securitytokenhandlerconfiguration, 1 of parameters overload of addsaml2 extension method in authenticationconfigurationextensionscore.cs thinktecture.identitymodel source. below ended with. 

var registry = new configurationbasedissuernameregistry(); registry.addtrustedissuer(constants.idsrv.signingcertthumbprint, constants.idsrv.issueruri);  var handlerconfig = new securitytokenhandlerconfiguration(); handlerconfig.audiencerestriction.allowedaudienceuris.add(new uri(constants.realm)); handlerconfig.issuernameregistry = registry; handlerconfig.certificatevalidator = getx509certificatevalidatorsetting();  x509store store = new x509store(storename.my, storelocation.localmachine); store.open(openflags.readonly); x509certificate2collection certificates = store.certificates; x509certificate2collection matchingcertificates = certificates.find(     x509findtype.findbysubjectdistinguishedname,     "cn=rptokencertificate", false); x509certificate2 certificate = certificates[0];  list<securitytoken> servicetokens = new list<securitytoken>(); servicetokens.add(new x509securitytoken(certificate)); securitytokenresolver serviceresolver =     securitytokenresolver.createdefaultsecuritytokenresolver(         servicetokens.asreadonly(), false); handlerconfig.servicetokenresolver = serviceresolver;  authentication.addsaml2(handlerconfig,      authenticationoptions.forauthorizationheader(samlscheme),      authenticationscheme.schemeonly(samlscheme));

hope helps.


Comments

Post a Comment

Popular posts from this blog

ios - UICollectionView Self Sizing Cells with Auto Layout -

-
Image
i'm trying self sizing uicollectionviewcells working auto layout, can't seem cells size content. i'm having trouble understanding how cell's size updated contents of what's inside cell's contentview. here's setup i've tried: custom uicollectionviewcell uitextview in contentview. scrolling uitextview disabled. the contentview's horizontal constraint is: "h:|[_textview(320)]", i.e. uitextview pinned left of cell explicit width of 320. the contentview's vertical constraint is: "v:|-0-[_textview]", i.e. uitextview pinned top of cell. the uitextview has height constraint set constant uitextview reports fit text. here's looks cell background set red, , uitextview background set blue: i put project i've been playing on github here . updated ios 9 after seeing github solution break under ios 9 got time investigate issue fully. have updated repo include several examples of different configurations s
Read more

node.js - ldapjs - write after end error -

-
i have created authentication service using following code in node.js , ldapjs. var when = require ('when'); var authenticationerror = require('../errors/authenticationerror'); var sessionmanagerservice = require('./sessionmanagerservice'); var ldap = require('ldapjs'); var client = ldap.createclient({ url: 'ldaps://ad.mycompany.com:636', tlsoptions: {'rejectunauthorized': false} }); module.exports = { signin: function (email, password) { return this.ldapbind(email, password).then( function () { return sessionmanagerservice.createsessionhash({email: email}); } ); }, ldapbind: function (email, password) { var deferred = when.defer(); client.bind(email, password, function(err) { if (err) { deferred.reject (new authenticationerror('invalid username and/or password!', 'authentication.signin.error')
Read more

DOM Manipulation in Wordpress (and elsewhere) using php -

-
DOM Manipulation in Wordpress (and elsewhere) using php - i'm quite new dom manipulation world , head start in order avoid mutual errors. i looking efficient way manipulate content generated wordpress using php. @ moment using simple html dom seems work fine. found domdocument , few others , helpfull if cleared out 1 faster, improve or @ to the lowest degree generate less errors in case of bad markup. also on side can explain syntax (instead of $html @$html) thank much php wordpress domdocument simple-html-dom
Read more