ASP.NET中基于soaphead的webservice安全机制

using System;using System.Web.Services;using System.Web.Services.Protocols;//请注意此命名空间必须有别于代理动态连接库上的命名空间。 //否则，将产生诸如多处定义AuthHeader这样的错误。 namespace SoapHeadersCS{  //由SoapHeader扩展而来的AuthHeader类   public class AuthHeaderCS : SoapHeader  {    public string Username;    public string Password;  }  //[WebService(Description="用于演示SOAP头文件用法的简单示例")]   public class HeaderService  {    public AuthHeaderCS sHeader;    [WebMethod(Description = "此方法要求有调用方自定义设置的soap头文件")]    [SoapHeader("sHeader")]    public string SecureMethod()    {      if (sHeader == null)        return "ERROR:你不是VIP用户!";      string usr = sHeader.Username;      string pwd = sHeader.Password;      if (AuthenticateUser(usr, pwd))      {        return "成功:" + usr + "," + pwd;      }      else      {        return "错误:未能通过身份验证";      }    }    private bool AuthenticateUser(string usr, string pwd)    {      if ((usr != null) && (pwd != null))      {        return true;      }      return false;    }  }}

WebService webservice = new WebService();AuthHeaderCS auth = new AuthHeaderCS();auth.Username = "vip";auth.Password = "vippw";webservice.AuthHeaderCSValue = auth;textBox1.Text = webservice.SecureMethod();