RequestSecurityToken 類別

定義

public ref class RequestSecurityToken : System::IdentityModel::Protocols::WSTrust::WSTrustMessage

public class RequestSecurityToken : System.IdentityModel.Protocols.WSTrust.WSTrustMessage

type RequestSecurityToken = class
    inherit WSTrustMessage

Public Class RequestSecurityToken
Inherits WSTrustMessage

繼承

Object

OpenObject

WSTrustMessage

RequestSecurityToken

範例

本主題中使用的程式代碼範例取自 Custom Token 範例。 此範例提供自定義類別，可讓您處理簡單的 Web 令牌 (SWT) ，並包含能夠提供 SWT 令牌的被動 STS 實作。 STS 是由衍生自 SecurityTokenService的類別實作。 從其令牌發行管線呼叫之 類別的許多 SecurityTokenService 方法，會採用 RequestSecurityToken 對象作為其參數。 如需此範例和其他可供 WIF 使用之範例以及下載位置的相關信息，請參閱 WIF 程式代碼範例索引。

下列程式碼範例示範 SecurityTokenService.GetScope 方法的實作。 方法會採用 RequestSecurityToken 做為其其中一個參數，而這個參數的屬性是用來設定 方法所傳回之對象的屬性 Scope 。

// Certificate Constants
private const string SIGNING_CERTIFICATE_NAME = "CN=localhost";
private const string ENCRYPTING_CERTIFICATE_NAME = "CN=localhost";

private SigningCredentials _signingCreds;
private EncryptingCredentials _encryptingCreds;
// Used for validating applies to address, set to URI used in RP app of application, could also have been done via config
private string _addressExpected = "http://localhost:19851/";

/// <summary>
/// This method returns the configuration for the token issuance request. The configuration
/// is represented by the Scope class. In our case, we are only capable of issuing a token to a
/// single RP identity represented by the _encryptingCreds field.
/// </summary>
/// <param name="principal">The caller's principal</param>
/// <param name="request">The incoming RST</param>
/// <returns></returns>
protected override Scope GetScope(ClaimsPrincipal principal, RequestSecurityToken request)
{
    // Validate the AppliesTo address
    ValidateAppliesTo( request.AppliesTo );

    // Create the scope using the request AppliesTo address and the RP identity
    Scope scope = new Scope( request.AppliesTo.Uri.AbsoluteUri, _signingCreds );

    if (Uri.IsWellFormedUriString(request.ReplyTo, UriKind.Absolute))
    {
        if (request.AppliesTo.Uri.Host != new Uri(request.ReplyTo).Host)
            scope.ReplyToAddress = request.AppliesTo.Uri.AbsoluteUri;
        else
            scope.ReplyToAddress = request.ReplyTo;
    }
    else
    {
        Uri resultUri = null;
        if (Uri.TryCreate(request.AppliesTo.Uri, request.ReplyTo, out resultUri))
            scope.ReplyToAddress = resultUri.AbsoluteUri;
        else
            scope.ReplyToAddress = request.AppliesTo.Uri.ToString() ;
    }

    // Note: In this sample app only a single RP identity is shown, which is localhost, and the certificate of that RP is 
    // populated as _encryptingCreds
    // If you have multiple RPs for the STS you would select the certificate that is specific to 
    // the RP that requests the token and then use that for _encryptingCreds
    scope.EncryptingCredentials = _encryptingCreds;

    return scope;
}

/// <summary>
/// Validates the appliesTo and throws an exception if the appliesTo is null or appliesTo contains some unexpected address.
/// </summary>
/// <param name="appliesTo">The AppliesTo parameter in the request that came in (RST)</param>
/// <returns></returns>
void ValidateAppliesTo(EndpointReference appliesTo)
{
    if (appliesTo == null)
    {
        throw new InvalidRequestException("The appliesTo is null.");
    }

    if (!appliesTo.Uri.Equals(new Uri(_addressExpected)))
    {
        throw new InvalidRequestException(String.Format("The relying party address is not valid. Expected value is {0}, the actual value is {1}.", _addressExpected, appliesTo.Uri.AbsoluteUri));
    }
}

備註

wst：RequestSecurityToken 元素 (訊息) 包含用來向安全性令牌服務要求安全性令牌的參數和屬性， (STS) 。 訊息 (或元素) 縮寫為 RST。 類別 RequestSecurityToken 包含代表 RST 元素的屬性。 RST 可以形成對應於 WS-Trust 所定義之任何要求系結的要求;例如，發行系結、更新系結、驗證系結或 Cancel 系結。 類別中的 RequestSecurityToken 許多屬性都對應至只有這些系結所定義之特定要求類型中的專案。 根據特定 RequestSecurityToken 物件所代表的要求類型，或它所代表之特定要求中的參數，物件的某些屬性可能是 null。

STS 會在包含 wst：RequestSecurityTokenResponse 元素的訊息中傳回要求的回應， (RSTR) 。 這個訊息是由 RequestSecurityTokenResponse 類別表示。

如需此類別代表項目的詳細資訊，請參閱適用於您案例的 WS-Trust 規格：WS-Trust February 2005、WS-Trust 1.3 或 WS-Trust 1.4。

建構函式

屬性

方法

適用於

另請參閱

• SecurityTokenService
• RequestedSecurityToken
• RequestSecurityTokenResponse