IWeb Forum Rss Feed

New Post: Having problem while decrypting my credentials.

adefwebserver — Fri, 13 Nov 2009 16:47:48 GMT

Try using a longer crypto key

New Post: Having problem while decrypting my credentials.

kem — Fri, 13 Nov 2009 15:16:27 GMT

When i set Encrypted property of my webservice's IWebAuthendicationHeader -that is assigned to my webservice's IWebAuthendicationHeaderValue property such as:

 IWebAuthendicationHeader.Encrypted = "true";

It throws ann exception: "System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> System.Security.Cryptography.CryptographicException: Length of the data to decrypt is invalid.
   at System.Security.Cryptography.RijndaelManagedTransform.TransformFinalBlock(Byte[] inputBuffer, Int32 inputOffset, Int32 inputCount)"
My pass is of 9 characters, username is just 4 characters and key to crypto is 4 characters. How can i resolve this?
Thanks...

New Post: How to secure my webservices

kem — Tue, 10 Nov 2009 12:49:44 GMT

And that is the web method of the webservice (of IWEB) that is supposed not to be called in case of wrong credentials - It may help :

using System;
using System.Data;
using System.Configuration;
using System.Linq;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.HtmlControls;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Xml.Linq;

using System.Web;
using System.Web.Services;
using System.Web.Services.Protocols;
using DotNetNuke.Entities.Users;
using DotNetNuke.Common.Utilities;


using System.Collections;
using System.ComponentModel;
using System.Data;


using Simetri.Modules.Data.Mtk;
using Simetri.Modules.Data.Mtk.DatabaseSpecific;
using SD.LLBLGen.Pro.ORMSupportClasses;
using System.Configuration;
using Simetri.Modules.Data.Mtk.EntityClasses;

/// <summary>
/// Summary description for FirmaBilgileri
/// </summary>
/// 
namespace DotNetNuke.Modules.IWebCSharp
{
    //[WebService(Namespace = "http://webservices.DotNetNuke.com/")]
    //[WebServiceBinding(ConformsTo = WsiProfiles.BasicProfile1_1)]

    public partial class WebService

    {

        [WebMethod(Description = " ....."), SoapHeader("IWebCredentials")]
        public FirmaEntity GetFirma(string firmaKey)
        {

		//Here are the codes...

        }
    }
}

New Post: How to secure my webservices

kem — Tue, 10 Nov 2009 12:07:41 GMT

Let's make it clear. My portal is on the server and what i did(i told in my previous post) is on the client.

On portal on my server i did:

I hit "Edit iWeb Configuration" on IWEB module and under "Method" column , i found the method i wantto use.

And under "Security Settings" column i chosed "Host" Only the name of the method and "Host" are displayed.

Others (Company, Application, Group1, Group2, Description ) were all empty.

And on the client i did what i posted previously: (the same as previous post)

webservices.iweb.WebService iwebservice = new MyNameSpace.webservices.iweb.WebService();
iwebservice.IWebAuthendicationHeaderValue = IWebAuthendication2.AttachCredentials();

And then i called the method of my webservice as such iwebservice.MyMethod(). 
I F5 and stepped into AttachCredentials() and assigned non-existing values to PortalID, Username,Password. 
I made no other changes. However my service is stilled called and it worked. 
How can i prevent my webservice's methods from running, when un-registered user cal them?

New Post: How to secure my webservices

trevorjdaniel — Tue, 10 Nov 2009 10:23:39 GMT

On your portal, if you visit the page where you have added the iWeb module at the bottom there is a link "Edit iWeb Configuration"

When you click this link and select the relevant portal you can assign the roles that can access the webservice.

If you leave them as "host" then it can only be accessed by the the client app if it has the host username and password.

Trev

New Post: How to secure my webservices

kem — Tue, 10 Nov 2009 10:19:07 GMT

It been done thanks. Bt i still have problem when interacting with my webservice -that is o a remote server. On client side ,just before calling webservice methods i assigned the values to credentials and then assing the credentials to Web as follows:

webservices.iweb.WebService iwebservice = new MyNameSpace.webservices.iweb.WebService();
//iwebservice.Url = WebserviceURL;
iwebservice.IWebAuthendicationHeaderValue = IWebAuthendication2.AttachCredentials();

And then i called the method of my webservice as such iwebservice.MyMethod(). I F5 and stepped into AttachCredentials() and assigned non-existing values to PortalID, Username,Password. I made no other changes. However my service is stilled c alled and it worked. How can i prevent my webservice's methods from running, when un-wanted user cal them?Thanks...

New Post: How to secure my webservices

adefwebserver — Mon, 09 Nov 2009 16:39:52 GMT

kem wrote:

Could someone pls guide me how to secure my webservice with a userid and a password. I will publish my webservices over a server and on a remote client i add those webservices as web references and retrieve data and want this to happen in a secure way. I followed the line ( http://iweb.adefwebserver.com/ExampleCode/SecureWebServices/tabid/64/Default.aspx ). However it is not telling how to hadle userid, password and encrypto/decrypto on server and how to call webservice fom client with encrypted userid and pass? So could you ls advice me some guidanec or tell how to do it?

Thanks...

The page has this example:

Public Function GetUser(ByVal PortalID As Integer, _

        ByVal UserID As Integer, ByVal Username As String, ByVal Password As String, ByVal ModuleId As String, _

        ByVal WebPageCall As Boolean, ByVal Encrypted As Boolean) As String

            Dim objIWebAuthendicationHeader As New IWebAuthendicationHeader()

            objIWebAuthendicationHeader.PortalID = PortalID

            objIWebAuthendicationHeader.Username = Username

            objIWebAuthendicationHeader.UserID = UserID

            objIWebAuthendicationHeader.Password = Password

            objIWebAuthendicationHeader.Encrypted = Encrypted

            objIWebAuthendicationHeader.WebPageCall = WebPageCall

            objIWebAuthendicationHeader.ModuleID = ModuleId

            Dim objIWebAuthendication As New IWebAuthendication(objIWebAuthendicationHeader)

            If Not objIWebAuthendication.ValidAndAuthorized() Then

                Return "Not Authorized"

            Else

                Dim objUser As UserInfo = IWebUserInfo.GetUserInfo(PortalID, UserID, Username, Password, ModuleId)

                Return "DisplayName: " & objUser.DisplayName & " - Email: " & objUser.Email

            End If

        End Function

New Post: How to secure my webservices

trevorjdaniel — Mon, 09 Nov 2009 16:26:37 GMT

this is the function.....

Imports System.Web
Public Class IWebAuthendication

    Public Shared Function AttachCredentials() As TaxiRoute_Mobile_Customer.uk.co.taxiroute.www.IWebAuthendicationHeader
        Dim IWebAuthendicationHeader As New TaxiRoute_Mobile_Customer.uk.co.taxiroute.www.IWebAuthendicationHeader

        IWebAuthendicationHeader.PortalID = "XXX"
        IWebAuthendicationHeader.Username = "username"
        IWebAuthendicationHeader.Password = "password"
        IWebAuthendicationHeader.Encrypted = 0

        Return IWebAuthendicationHeader
    End Function
End Class

New Post: How to secure my webservices

trevorjdaniel — Mon, 09 Nov 2009 16:24:46 GMT

Have you added the IWebAuthendication.vb to your project?

The method is contained within that file.

Trev

New Post: How to secure my webservices

kem — Mon, 09 Nov 2009 15:18:02 GMT

It doesn't acknowledge a method such as AttachCredentials().

Thanks...

New Post: How to secure my webservices

trevorjdaniel — Mon, 09 Nov 2009 13:29:27 GMT

Hi Kem,

If i understand your problem correctly then you need to do the following to your client application...

1. Add the file IWebAuthendication.vb to your project

2. Make sure you have this line of code in the app as you create the web service

ws.IWebAuthendicationHeaderValue = IWebAuthendication.AttachCredentials()

3. Look for the function AttachCredentials in the iwebauthendication file and change to include your username, password and portal.

Hope that helps

Trev

New Post: How to secure my webservices

kem — Mon, 09 Nov 2009 12:29:05 GMT

Could someone pls guide me how to secure my webservice with a userid and a password. I will publish my webservices over a server and on a remote client i add those webservices as web references and retrieve data and want this to happen in a secure way. I followed the line ( http://iweb.adefwebserver.com/ExampleCode/SecureWebServices/tabid/64/Default.aspx ). However it is not telling how to hadle userid, password and encrypto/decrypto on server and how to call webservice fom client with encrypted userid and pass? So could you ls advice me some guidanec or tell how to do it?

Thanks...

New Post: Having problem while entegrating my web service to IWEB module

kem — Mon, 09 Nov 2009 12:21:23 GMT

It is done. Thanks...

I just refered to WebService there in my partial class as such:

 public partial class WebService {}

New Post: Having problem while entegrating my web service to IWEB module

adefwebserver — Sat, 07 Nov 2009 20:26:43 GMT

Hopefully this page will explain IWeb:

http://iweb.adefwebserver.com/ExampleCode/SecureWebServices/tabid/64/Default.aspx

New Post: Having problem while entegrating my web service to IWEB module

kem — Sat, 07 Nov 2009 18:56:02 GMT

I followed those instructions on the link you sent right upto step 8. the only difference is the code i wrote (and it is below). On the 8 step it says : 8) In the web browser, place an instance of the IWEB module on a page and configure it.
Then click on the link that appears after "This website implements this web service:" I placed an intance of IWEB module on page as it says but configure what? The only thing i can do is to click the link "this website implement this web service" and i did it. And couldn't find the method i coded. That is all i did. So isn'y what i am doing "using IWeb" ? What else am i supposed to do?

Here is my code:

using System;
using System.Data;
using System.Configuration;
using System.Linq;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.HtmlControls;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Xml.Linq;

using System.Web;
using System.Web.Services;
using System.Web.Services.Protocols;
using DotNetNuke.Entities.Users;
using DotNetNuke.Common.Utilities;


using System.Collections;
using System.ComponentModel;
using System.Data;


using asd.asd.asd.asd;
using asd.asd.ad.ad.asd;
using asd.asd.asd.asd;
using System.Configuration;
using asd.asd.asd.asd.asd;

/// <summary>
/// Summary description for FirmaBilgileri
/// </summary>
/// 
namespace DotNetNuke.Modules.IWebCSharp
{
    [WebService(Namespace = "http://webservices.DotNetNuke.com/")]
    [WebServiceBinding(ConformsTo = WsiProfiles.BasicProfile1_1)]
    
    public partial class FirmaBilgileri : DotNetNuke.Modules.IWebCSharp.WebService //System.Web.Services.WebService
    {

        [WebMethod]        
        public FirmaEntity GetFirma(string firmaKey)
        {
            Guid fKey = new Guid(firmaKey);
            FirmaEntity firma = new FirmaEntity(fKey);

            // Here i have codes but basically here is short
            //descreption of what i do here
            
            DbAdapter.FetchEntity(firma, pPath);

            return firma;
        }

        private DataAccessAdapter _dbAdapter;

        public DataAccessAdapter DbAdapter
        {
            get
            {
                if (_dbAdapter == null)
                {
                    _dbAdapter = new DataAccessAdapter();
                    _dbAdapter.ConnectionString = asdasd;
                }
                return _dbAdapter;
            }
            set { _dbAdapter = value; }
        }
    }
}

New Post: Having problem while entegrating my web service to IWEB module

adefwebserver — Sat, 07 Nov 2009 16:34:38 GMT

It should be. All IWeb does is provide some methods to authenticate users via DotNetNuke (for example IWebAuthendication(IWebCredentials)). In your sample code it appears you are not doing that so from your sample code you're not actually using IWeb.

See: http://iweb.adefwebserver.com/ExampleCode/HowtoextendIWebforyourownmodules/tabid/59/Default.aspx

for proper use of IWeb.

New Post: Having problem while entegrating my web service to IWEB module

kem — Sat, 07 Nov 2009 16:28:34 GMT

adefwebserver wrote:

You have to make sure that FirmaEntity is a public class or type and that it is marked [Serializable()]

Well actually i was using that webservice method that returns value - that is type of FirmaEntity- when i was not using IWEB. So i think it must be [Serializable()]. If it is not, how can i make it [Serializable()]. Is to insert a line of [Serializable()] just above the line public partial class FirmaBilgileri : System.Web.Services.WebService. enough?

New Post: Having problem while entegrating my web service to IWEB module

adefwebserver — Sat, 07 Nov 2009 12:56:34 GMT

You have to make sure that FirmaEntity is a public class or type and that it is marked [Serializable()]

New Post: Having problem while entegrating my web service to IWEB module

kem — Sat, 07 Nov 2009 09:48:09 GMT

I downloaded and installed IWEB to my DNN with host account . Then under the App_Code  folder i right-clicked  on the IWebMethods folder and selected Add New Item. 
And then i added a class and i manipulated it as such:


using System;
using System.Data;
using System.Configuration;
using System.Linq;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.HtmlControls;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Xml.Linq;

using System.Web;
using System.Web.Services;
using System.Web.Services.Protocols;
using DotNetNuke.Entities.Users;
using DotNetNuke.Common.Utilities;


using System.Collections;
using System.ComponentModel;
using System.Data;

// here some dll i need.
using asd;
using ...;
using ...;
using ..;
using ...;   

/// <summary>
/// Summary description for FirmaBilgileri
/// </summary>
/// 
namespace DotNetNuke.Modules.IWebCSharp
{
  
    public partial class FirmaBilgileri : System.Web.Services.WebService
    {

        [WebMethod]
        public FirmaEntity GetFirma(string firmaKey)
        {
            Guid fKey = new Guid(Key);
            FirmaEntity firma = new FirmaEntity(fKey);
            
            // HERE i have lines of codes

            DbAdapter.FetchEntity(firma, pPath);

            return firma;
        }

       private DataAccessAdapter _dbAdapter;

        public DataAccessAdapter DbAdapter
        {
            get
            {
                
                return _dbAdapter;
            }
            set { _dbAdapter = value; }
        }

        
    }
}

Then in the web browser, i placed an instance of the IWEB module . Then i clicked on the link that appears after "This website implements this web service:". Then in the list of webservices methods I couldn't see my webservice method called GetFirma() - the method i posted above. Do i need to do some extra configuration?

How can i resolve this? Thanks in advance...

New Post: Trying to populate a datagrid from webservice

trevorjdaniel — Thu, 15 Oct 2009 11:32:17 GMT

Hi,

Thanks!!!! - you are correct from what I have read.

I have managed to get it working using a dataset.

Trev