C# WCF Client Binding Interop Blackboard Java WS-Security over HTTPS Transport -

i having trouble getting wcf binding work blackboard java web services api.

(simple answer if has got working please post working binding wcf blackboard)

i have spent hours trying different configurations , custom coded bindings.

some unsuccessful attempts:

calling-a-ws-security-java-web-service-with-c-sharp-client

wcf-client-with-ws-security 12-common-wcf-interop-confusions

configure-wcf-for-ws-security-with-username-over-https

wcf-client-connecting-to-java-soap-web-service-using-ws-security

clearusernamebinding

there many more java , ws-security wcf wont go on.

it seems every time 1 thing working breaks. feel going around in circles , making myself more confused.

as first test trying simple initialize context object , login using admin test user account wcf proxy.

blackboard doc contextws

to make sure of worked first downloaded sample code .net wse 2.0 , tested that, worked perfectly.

now when use wcf , binding cannot same behaviour.

first successful exchange old wse 2.0 ===================================

wse 2.0 contextws initialization

<?xml version="1.0" encoding="utf-8"?> <soap:envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/xmlschema-instance" xmlns:xsd="http://www.w3.org/2001/xmlschema" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/03/addressing" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">     <soap:header>         <wsa:action>initialize</wsa:action>         <wsa:messageid>uuid:b975e989-a4ce-4e1e-abd6-500945346c40</wsa:messageid>         <wsa:replyto>             <wsa:address>http://schemas.xmlsoap.org/ws/2004/03/addressing/role/anonymous</wsa:address>         </wsa:replyto>         <wsa:to>https://blackboard.server.name/webapps/ws/services/context.ws</wsa:to>         <wsse:security soap:mustunderstand="1">             <wsu:timestamp wsu:id="timestamp-47d0d017-4fd1-46c2-b1b4-2431402cf847">                 <wsu:created>2015-07-16t04:58:02z</wsu:created>                 <wsu:expires>2015-07-16t05:03:02z</wsu:expires>             </wsu:timestamp>             <wsse:usernametoken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:id="securitytoken-1b71e23a-2d84-40a5-9509-b75902ec8b76">                 <wsse:username>session</wsse:username>                 <wsse:password type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#passwordtext">nosession</wsse:password>                 <wsse:nonce>law2qxrxz1mannkcezlhga==</wsse:nonce>                 <wsu:created>2015-07-16t04:58:02z</wsu:created>             </wsse:usernametoken>         </wsse:security>     </soap:header>     <soap:body /> </soap:envelope> 

wse 2.0 contextws initialization success response

<?xml version='1.0' encoding='utf-8'?> <soapenv:envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">     <soapenv:body>         <ns:initializeresponse xmlns:ns="http://context.ws.blackboard">             <ns:return>c2762f357bbc42a4a88d33e4e42486b8</ns:return>         </ns:initializeresponse>     </soapenv:body> </soapenv:envelope> 

wse 2.0 contextws login request

<?xml version="1.0" encoding="utf-8"?> <soap:envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/xmlschema-instance" xmlns:xsd="http://www.w3.org/2001/xmlschema" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/03/addressing" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">     <soap:header>         <wsa:action>login</wsa:action>         <wsa:messageid>uuid:a823128b-efb4-49e1-87d9-fd35167f0bfc</wsa:messageid>         <wsa:replyto>             <wsa:address>http://schemas.xmlsoap.org/ws/2004/03/addressing/role/anonymous</wsa:address>         </wsa:replyto>         <wsa:to>https://blackboard.server.name/webapps/ws/services/context.ws</wsa:to>         <wsse:security soap:mustunderstand="1">             <wsu:timestamp wsu:id="timestamp-c38daf19-6b39-4391-a3f8-bcc030064a3e">                 <wsu:created>2015-07-16t04:58:15z</wsu:created>                 <wsu:expires>2015-07-16t05:03:15z</wsu:expires>             </wsu:timestamp>             <wsse:usernametoken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:id="securitytoken-65948746-e616-436a-85f4-d2e1023e39be">                 <wsse:username>session</wsse:username>                 <wsse:password type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#passwordtext">c2762f357bbc42a4a88d33e4e42486b8</wsse:password>                 <wsse:nonce>t0xs8aiaiodmk3sfkgdqtg==</wsse:nonce>                 <wsu:created>2015-07-16t04:58:15z</wsu:created>             </wsse:usernametoken>         </wsse:security>     </soap:header>     <soap:body>         <login xmlns="http://context.ws.blackboard">             <userid>test_admin</userid>             <password>testpassword</password>             <clientvendorid>testclient</clientvendorid>             <clientprogramid>testpoc</clientprogramid>             <loginextrainfo xsi:nil="true" />             <expectedlifeseconds>10000000</expectedlifeseconds>         </login>     </soap:body> </soap:envelope> 

wse 2.0 contextws login success response

<?xml version='1.0' encoding='utf-8'?> <soapenv:envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">     <soapenv:body>         <ns:loginresponse xmlns:ns="http://context.ws.blackboard">             <ns:return>true</ns:return>         </ns:loginresponse>     </soapenv:body> </soapenv:envelope> 

===================================

so know works our environment , know user can login.

using wcf able initialization working looses session. not put returned session id password field next message. have tried manually of course; error stating password field read only.

now wcf configuration , code has gotten me closest above communication.

wcf app.config binding

<?xml version="1.0" encoding="utf-8" ?> <configuration>     </system.servicemodel>         <bindings>           <custombinding>                 <binding name="wcfsoapinteropjavaws"  closetimeout="00:01:00" opentimeout="00:01:00" receivetimeout="00:10:00" sendtimeout="00:01:00"  >                   <textmessageencoding messageversion="soap11" writeencoding="utf-8" />                   <security authenticationmode="usernameovertransport" enableunsecuredresponse="true" allowserializedsigningtokenonreply="true"                             messagesecurityversion="wssecurity10wstrustfebruary2005wssecureconversationfebruary2005wssecuritypolicy11basicsecurityprofile10"                             includetimestamp="true" allowinsecuretransport="true" canrenewsecuritycontexttoken="false" >                   </security>                   <httpstransport  authenticationscheme="anonymous"  />                 </binding>                </custombinding>          </bindings>          <client>              <endpoint                  address="https://blackboard.server.name:443/webapps/ws/services/context.ws"                 binding="custombinding" bindingconfiguration="wcfsoapinteropjavaws"                 contract="contextws.contextwsporttype" name="context.wcfsoapinteropjavaws" />          </client>      </system.servicemodel> </configuration> 

wcf c# code

 public bool testwrapper(string userid, string userpassword){                try              {                  context = new contextwrapper("context.wcfsoapinteropjavaws");                   context.clientcredentials.username.username = "session";                  context.clientcredentials.username.password = "nosession";                   context.initialize();                   //context.clientcredentials.username.password = "886d935527944f94a3526288e39a555e";  // sessionguid_here throws read error pasword                   bool retval = context.login(userid, userpassword, vendorid, programid, null, expectedlife);                   return retval;              }              catch (system.exception e)              {                  lasterror = e;                  return false;              }         } 

this soap communication looks like.

wcf contextws initialization request

<s:envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">     <s:header>         <vsdebuggercausalitydata xmlns="http://schemas.microsoft.com/vstudio/diagnostics/servicemodelsink">uidpo+fmveflwutmgsatru3ht9eaaaaamyvjsx+bhueyctdsfqfktkqe8xmmia1mpxouaouxgjwacqaa</vsdebuggercausalitydata>         <o:security s:mustunderstand="1" xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">             <u:timestamp u:id="_0">                 <u:created>2015-07-16t07:15:05.109z</u:created>                 <u:expires>2015-07-16t07:20:05.109z</u:expires>             </u:timestamp>             <o:usernametoken u:id="uuid-1237f56c-7c68-4d40-a756-7ff2c19a3235-1">                 <o:username>session</o:username>                 <o:password type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#passwordtext">nosession</o:password>             </o:usernametoken>         </o:security>     </s:header>     <s:body xmlns:xsi="http://www.w3.org/2001/xmlschema-instance" xmlns:xsd="http://www.w3.org/2001/xmlschema"/> </s:envelope> 

wcf contextws initialization success response

<?xml version='1.0' encoding='utf-8'?> <soapenv:envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">     <soapenv:body>         <ns:initializeresponse xmlns:ns="http://context.ws.blackboard">             <ns:return>886d935527944f94a3526288e39a555e</ns:return>         </ns:initializeresponse>     </soapenv:body> </soapenv:envelope> 

wcf contextws login request

<s:envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" xmlns:u="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">     <s:header>         <vsdebuggercausalitydata xmlns="http://schemas.microsoft.com/vstudio/diagnostics/servicemodelsink">uidpo+jmveflwutmgsatru3ht9eaaaaamyvjsx+bhueyctdsfqfktkqe8xmmia1mpxouaouxgjwacqaa</vsdebuggercausalitydata>         <o:security s:mustunderstand="1" xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">             <u:timestamp u:id="_0">                 <u:created>2015-07-16t07:15:14.033z</u:created>                 <u:expires>2015-07-16t07:20:14.033z</u:expires>             </u:timestamp>             <o:usernametoken u:id="uuid-1237f56c-7c68-4d40-a756-7ff2c19a3235-1">                 <o:username>session</o:username>                 <o:password type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#passwordtext">nosession</o:password>             </o:usernametoken>         </o:security>     </s:header>     <s:body xmlns:xsi="http://www.w3.org/2001/xmlschema-instance" xmlns:xsd="http://www.w3.org/2001/xmlschema">         <login xmlns="http://context.ws.blackboard">             <userid>test_admin</userid>             <password>testpassword</password>             <clientvendorid>testclient</clientvendorid>             <clientprogramid>testpoc</clientprogramid>             <loginextrainfo xsi:nil="true"/>             <expectedlifeseconds>10000000</expectedlifeseconds>         </login>     </s:body> </s:envelope> 

wcf contextws login failed response

<?xml version='1.0' encoding='utf-8'?> <soapenv:envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">     <soapenv:body>         <soapenv:fault>             <faultcode>soapenv:server</faultcode>             <faultstring>[wsfw001]invalid session</faultstring>             <detail />         </soapenv:fault>     </soapenv:body> </soapenv:envelope> 

as can see session return id has not been added password field on login request there "invalid session:

it seemed going well.

in short if knows how achieve binding wcf client blackboard java webservice api , example fantastic. other wise hoping else knows more wcf bindings java might able take @ above see going wrong.

any can give me working appreciated thanks. hoping silly missing.

sorry such long detailed question.

thanks heaps of reading , useful samples able working. blackboard wcf.

thanks go both: ajadex lopez

http://www.isyourcode.com/2010/08/attaching-oasis-username-tokens-headers.html

johnny lockhart "incoming message not contain required security header"

bb buggie might best search forum wcf find post

sample class

using system; using system.servicemodel.description; using system.servicemodel.channels; using system.servicemodel.dispatcher; using system.servicemodel; using system.xml; using system.security.cryptography; using system.text;   namespace bbwcfwrapper {       /// <summary>     /// coupled additional classes below, allows injecting ws-security header wcf service call without requiring ssl on server.     /// </summary>     /// <remarks>http://isyourcode.blogspot.com/2010/08/attaching-oasis-username-tokens-headers.html</remarks>     public class bbwssecuritybehavior : iendpointbehavior     {         public messageinspector messageinspector { get; set; }          public bbwssecuritybehavior(messageinspector messageinspector)         {             messageinspector = messageinspector;         }          public void validate(serviceendpoint endpoint)         { }         public void addbindingparameters(serviceendpoint endpoint, bindingparametercollection bindingparameters)         {         }         public void applydispatchbehavior(serviceendpoint endpoint, endpointdispatcher endpointdispatcher)         { }         public void applyclientbehavior(serviceendpoint endpoint, clientruntime clientruntime)         {             if (this.messageinspector == null) throw new invalidoperationexception("caller must supply clientinspector.");             clientruntime.messageinspectors.add(messageinspector);         }      }      public class messageinspector : iclientmessageinspector     {         public messageheader[] headers { get; set; }         public messageinspector(params messageheader[] headers)         {             headers = headers;         }         public object beforesendrequest(ref message request, iclientchannel channel)         {             if (headers != null)             {                 (int = headers.length - 1; >= 0; i--)                 {                     request.headers.insert(0, headers[i]);                 }             }              return request;         }         public void afterreceivereply(ref message reply, object correlationstate)         {         }     }       public class securityheader : messageheader     {          public string systemuser { get; set; }         public string systempassword { get; set; }         public securityheader(string systemuser, string systempassword)         {             systemuser = systemuser;             systempassword = systempassword;         }         public override string name         {             { return "security"; }         }         public override string namespace         {             { return "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"; }         }          protected override void onwritestartheader(xmldictionarywriter writer, messageversion messageversion)         {             writer.writestartelement("wsse", name, namespace);             writer.writexmlnsattribute("wsse", namespace);             writer.writeattributestring("soap", "mustunderstand", namespace, "1");         }          protected override void onwriteheadercontents(xmldictionarywriter writer, messageversion messageversion)         {             writeheader(writer);         }          private void writeheader(xmldictionarywriter writer)         {             var createdate = datetime.now;              //start parent elements              writer.writestartelement("wsu","timestamp","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd");             writer.writeattributestring("wsu","id","http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd","timestamp-6557466");              #region start child elements              writer.writestartelement("wsu", "created", xmlconvert.tostring(createdate, "yyyy-mm-ddthh:mm:sszzzzzz"));             writer.writeendelement();   //end created              writer.writestartelement("wsu", "expires", xmlconvert.tostring(createdate.adddays(1), "yyyy-mm-ddthh:mm:sszzzzzz"));             writer.writeendelement();   //end expires              #endregion              writer.writeendelement();   //end timestamp              //start parent elements              writer.writestartelement("wsse", "usernametoken", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd");             writer.writexmlnsattribute("wsu", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd");              #region start child elements              writer.writestartelement("wsse", "username", null);             writer.writestring(systemuser);             writer.writeendelement();//end username               writer.writestartelement("wsse", "password", null);             writer.writeattributestring("type", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#passwordtext");             writer.writestring(systempassword);             writer.writeendelement();//end password               // unique nonce value - encode sha-1 'randomness'             // in theory nonce guid             // used stop replay attacks              writer.writestartelement("wsse", "nonce", null);             writer.writestring(getsha1string(guid.newguid().tostring()));             writer.writeendelement();//nonce               writer.writestartelement("wsu", "created", null);             writer.writestring(xmlconvert.tostring(createdate, "yyyy-mm-ddthh:mm:sszzzzzz"));             writer.writeendelement();   //end created              #endregion              writer.writeendelement();//end usernametoken             writer.flush();           }          protected string getsha1string(string phrase)         {             sha1cryptoserviceprovider sha1hasher = new sha1cryptoserviceprovider();             byte[] hasheddatabytes = sha1hasher.computehash(encoding.utf8.getbytes(phrase));             return convert.tobase64string(hasheddatabytes);         }      }  } 

example use

  calendar = new calendarwrapper("calendar.bb_wssecurity_binding");          //this adds custom security headder wcf , java ws-security interop         calendar.endpoint.behaviors.add(new bbwssecuritybehavior(new messageinspector(bbwsauth.securityheader)));          calendar.initializecalendarws(false); 

simple wrapper class

    public class calendarwrapper : calendarwsporttypeclient {     public calendarwrapper() : base() { }      public calendarwrapper(string endpointconfigurationname) : base(endpointconfigurationname) { }     public calendarwrapper(binding binding, endpointaddress remoteaddress) : base(binding, remoteaddress) { } } 

config

 <bindings>      <basichttpsbinding>       <binding name="bb_wssecurity_binding" messageencoding="text" textencoding="utf-8" maxreceivedmessagesize="4000000" >         <readerquotas maxdepth="32" maxstringcontentlength="8192" maxarraylength="16384"           maxbytesperread="4096" maxnametablecharcount="16384" />       </binding>     </basichttpsbinding>    </bindings>    <client>    <endpoint address="https://xxxxxxxxxx/webapps/ws/services/calendar.ws"            binding="basichttpsbinding" bindingconfiguration="bb_wssecurity_binding"             contract="calendarws.calendarwsporttype" name="calendar.bb_wssecurity_binding"  />