Thread.CurrentPrincipal is emtpy! -- dotnet web services enhancements

Scribnar
1/17/2005 10:35:02 PM

Hi Dilip,

Thanks for your replies. Please find the code below.

protected override string AuthenticateToken( UsernameToken token )
{

if(!obj.ValidateUser(token.Username, token.Password))
{
//return any invalid password which will throw authendication failed
message.
return DateTime.Now.ToLongDateString();
}
else
{
IIdentity id = new GenericIdentity(token.Username);
//This line creates a principal for the given identity with the list of
roles and returns the principal after setting Thread.CurrentPrincipal to the
principal object created
token.Principal = CustomSecurity.AttachPrincipal(id);
Thread.CurrentPrincipal = token.Principal;
return token.Password;
}

}

I have created a class CustomPrincipal extending IPrincipal interface. That
is being returned from CustomSecurity.AttachPrincipal method.

Following is the simple version of my web method.
[WebMethod]
public string RetriveAllAppliedBuilds()
{
string userName = System.Threading.Thread.CurrentPrincipal.Identity.Name;

return userName ;
}

Thanks.

Regards,
-Suresh.

[quoted text, click to view]

Scribnar
1/17/2005 10:59:03 PM

Hi William,

Does that mean thread pooling happens in ASP.NET as well?

Thanks.
-Suresh.

[quoted text, click to view]

Scribnar
1/17/2005 11:05:02 PM

William,

Sorry that would stupid question as its obvious in the <processModel>
element in machine.config.

-Suresh.

[quoted text, click to view]

William Stacey [MVP]
1/18/2005 12:41:00 AM

I blogged a sample doing this and it worked for me.
http://spaces.msn.com/members/staceyw/Blog/cns!1pnsZpX0fPvDxLKC6rAAhLsQ!166.entry

The one thing to watch for is clear Thread.CurrentPrincipal before the
WebMethod returns as it is a ThreadPool thread - as it may/will get reused.
So you don't want another thread using your last principal object for code
access security.

--
William Stacey, MVP
http://mvp.support.microsoft.com

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about dotnet web services enhancements

dotnet web services enhancements : Thread.CurrentPrincipal is emtpy!