我在我的项目中使用.NET Framework 4.0.所以,我首先添加了WebService作为服务引用,并在我的app.config上获取绑定.而且我将列出我的尝试

尝试#1

我实例化了这样的服务并添加了凭据：

在App.Config上

<binding name="SubscriptionWSImplServiceSoapBinding" >
  <security mode="TransportWithMessageCredential">
    <transport clientCredentialType="Basic"/>
  </security>
</binding>

SubscriptionWSImplServiceClient ClientWs = new SubscriptionWSImplServiceClient();
ClientWs.ClientCredentials.UserName.UserName = "some-username";
ClientWs.ClientCredentials.UserName.Password = "some-password";

var SomeResposne = ClientWs.RunMethod(); //I have exception at this point

我得到一个例外如下：

System.ArgumentException: The provided URI scheme 'http' is invalid;
 expected 'https'. Parameter name: via at System.ServiceModel.Channels

例外情况说Web服务的url必须是HTTPS,但给定的Web服务URL是HTTP而不是HTTPS.

但我不介意HttpS并且进行了第二次尝试.

尝试#2

如this answer所述,我尝试如下：

BasicHttpBinding binding = new BasicHttpBinding(BasicHttpSecurityMode.TransportWithMessageCredential);
binding.Security.Message.ClientCredentialType = BasicHttpMessageCredentialType.UserName;
CustomBinding customBinding = new CustomBinding(binding);
SecurityBindingElement element = customBinding.Elements.Find<SecurityBindingElement>();
element.IncludeTimestamp = false;

EndpointAddress address = new EndpointAddress("https://www.GivenServiceUrl.com/WebService"); //Note that the url does not end as ..svc or ..asmx! Just the name like this with no dot or extension


SubscriptionWSImplServiceClient ClientWs = new SubscriptionWSImplService(customBinding,address);
ClientWs.ClientCredentials.UserName.UserName = "some-username";
ClientWs.ClientCredentials.UserName.Password = "some-password";

var SomeResposne = ClientWs.RunMethod(); //I have exception at this point

我得到一个例外如下：

System.ServiceModel.Security.SecurityNegotiationException: Could not
establish trust relationship for the SSL/TLS secure channel with authority ‘07001’

因此,我参加了我的第三次尝试,我将参考文献作为WebReference而不是作为我的项目的ServiceReference.

尝试#3

SubscriptionWSImplService ClientWs2 = new SubscriptionWSImplService();
var SomeResposne = ClientWs.RunMethod(); //I have exception at this point

我不知道如何发送安全头.

我得到一个例外如下：

System.Web.Services.Protocols.soapHeaderException: An error was
 discovered processing the <wsse: Security> header

但在这里,我无法添加必要的标题.你能帮帮我吗？

尝试1或尝试2或尝试3,考虑到我使用Framework 4.0,应该使用哪一个？我该如何解决这个问题？

根据文档,最终请求SOAP必须如下所示：

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:sub="http://subscription.services.ws.fourplay.com.tr/">
   <soapenv:Header>
      <wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
         <wsse:Usernametoken wsu:Id="Usernametoken-12" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
            <wsse:Username>admin</wsse:Username>
            <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">123456</wsse:Password>
           <wsse:Nonce EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">1lcj+WbCMlrPyhcud4QxiQ==</wsse:Nonce>
           <wsu:Created>2012-06-05T10:23:26.879Z</wsu:Created>
        </wsse:Usernametoken>
     </wsse:Security>
   </soapenv:Header>
   <soapenv:Body>
      <sub:RunMethod>
         <!--Optional:-->
         <sub:opaque id>555555555</sub:opaque id>
         <sub:params>
            <!--Optional:-->
            <name>GUID</name>
            <!--Optional:-->
            <value>2fc4ce1d-645e-41f4-811e-28510a02a17f </value>
         </sub:params>      
</sub: RunMethod >

public class SoapSecurityHeader : MessageHeader
    {
        private readonly string _password,_username,_nonce;
        private readonly DateTime _createdDate;

        public SoapSecurityHeader(string id,string username,string password,string nonce)
        {
            _password = password;
            _username = username;
            _nonce = nonce;
            _createdDate = DateTime.Now;
            this.Id = id;
        }

        public string Id { get; set; }

        public override string Name
        {
            get { return "Security"; }
        }

        public override string Namespace
        {
            get { return "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"; }
        }

        protected override void OnWriteStartHeader(XmlDictionaryWriter writer,MessageVersion messageVersion)
        {
            writer.WriteStartElement("wsse",Name,Namespace);
            writer.WriteXmlnsAttribute("wsse",Namespace);
        }

        protected override void OnWriteHeaderContents(XmlDictionaryWriter writer,"Usernametoken",Namespace);
            writer.WriteAttributeString("Id","Usernametoken-10");
            writer.WriteAttributeString("wsu","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd");

            writer.WriteStartElement("wsse","Username",Namespace);
            writer.WriteValue(_username);
            writer.WriteEndElement();

            writer.WriteStartElement("wsse","Password",Namespace);
            writer.WriteAttributeString("Type","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText");
            writer.WriteValue(_password);
            writer.WriteEndElement();

            writer.WriteStartElement("wsse","Nonce",Namespace);
            writer.WriteAttributeString("EncodingType","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary");
            writer.WriteValue(_nonce);
            writer.WriteEndElement();

            writer.WriteStartElement("wsse","Created",Namespace);
            writer.WriteValue(_createdDate.ToString("YYYY-MM-DDThh:mm:ss"));
            writer.WriteEndElement();

            writer.WriteEndElement();
        }
    }

以及如何使用标题我从link获得它.

有一个相关的主题,但没有一个很好的解决方案：
Dojo Data grid with custom HTTP headers

我已经在’dojo.store.JsonRest’中看到了包含构造函数的JsonRest实现,如果我们能够做到或不做(我不这么认为),这一点并不明显.正在使用的JsonRest存储示例：

var store = new JsonRestStore({target: "/Table/" });

A.子类​​dojo.store.JsonRest：

var MyJsonRest = declare(JsonRest,{

    get: function(id,options) {
        return this.inherited(
            arguments,[id,lang.mixin(this.defaultGetHeaders,options)]
        );
    }
});

所以你重写get方法调用超类’get,但第二个参数选项(即.headers)现在也包含this.defaultGetHeaders的属性.

B.在构造函数中定义defaultGetHeaders：

var myJsonRest = MyJsonRest({
    target: "/echo/json/",defaultGetHeaders: {
        userId: "xyz",requestedBy: "abc",requestedFrom: "123"            
    }        
});

C.调用myJsonRest.get()方法,您也可以覆盖默认标头：

myJsonRest.get("someId",{ requestedFrom: "321"}).then(function(result) {
    console.log(result);        
});

D.检查请求标头：

我尝试了各种方法但没有成功,比如 – 覆盖GetWebRequest方法：

protected override System.Net.WebRequest GetWebRequest(Uri uri)
    {
        string user = "username";
        string pwd = "password";

        System.Net.WebRequest request = base.GetWebRequest(uri);

        string auth = string.Format("Basic {0}",Convert.ToBase64String(System.Text.Encoding.Default.GetBytes(string.Format("{0}:{1}",user,pwd))));
        request.PreAuthenticate = true;
        request.AuthenticationLevel = System.Net.Security.AuthenticationLevel.MutualAuthRequested;
        request.Headers.Add(HttpRequestHeader.Authorization,auth);

        return request;
    }

WSSE安全标题应该类似于：

<Security xmlns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
         <Usernametoken>
            <Username>username</Username>
            <Password>password</Password>
         </Usernametoken>
      </Security>

提前谢谢了！
亲切的问候,

http://underthehood.ironworks.com/2010/01/why-doesnt-my-generated-proxy-class-build-wsse-elements-into-the-soap-request-header.html

Why doesn’t my generated proxy class build WSSE elements into the SOAP request header?

How to add security header to a SOAP message?

哪个提供答案！