读取 cookie 值:使用 URL 重写提供程序模块 - 无法在 System.Web.Configuration.MachineKeySection.EncryptOrDecryptData 进行验证

问题描述

我需要使用 URL 重写模块将 USERNAME 附加到服务器端的 URL.

I have requirement to append USERNAME to the URL in server side using URL Rewrite module.

为什么?:我有网站 site1，当用户登录到 site1 时，他会看到一个指向 site2. 的链接，这个链接是 URL 或报告.(表).已在 site1 中使用 FormAuthentication 创建了经过身份验证的票证.当 USER 单击链接时，应将经过身份验证的 用户名 传递给 site2.

Why?: I have website site1, when USER logs in to site1, he will see a link to site2., This link is URL or reports. (Tableau). Authenticated ticket has been created using FormAuthentication in site1. When USER clicks the link, authenticated username should be passed to site2.

我可以从客户端附加用户名，但由于安全问题，我必须在执行之前将用户名附加到服务器端的 URL.

I could append username from client side, but due to security issues I have to append username to URL in server side before it gets executed.

所以我决定使用 URL 重写提供程序，它通过解密 cookie 值来获取 用户名，如下所示

So I have decided to use URL rewrite provider, which grabs the username by decrypting the cookie value as shown below

     namespace PlatformAnalysisUrlProvider.PlatformAnalysisProvider
      {
       class AnalysisRewriteProvider: IRewriteProvider, IProviderDescriptor
       {
          public void Initialize(IDictionary<string, string> settings,
                                 IRewriteContext rewriteContext)
          {

          }

          public string Rewrite(string value)
          {
             string[] cookievalues = value.Spli('=');
             FormAuthentication ticket = FormAuthentication.Decrypt(cookievalues[1]);

              //Decrypt throws error as shown below
          } 
       }
      }

Cookie 值

        cookievalues [0] =  has the key

        cookievalues [1] =  has the value 

示例:

        233AWJDKSHFHFDSHFJKDFDKJFHDKJFKDJFHDHFDHFKJHDFKJHDFJHDKJFHDSKJFHDF

这是一个 cookie 值.但是解密没有发生

It's a cookie value. But decrypt is not happening

我收到以下错误

        Unable to validate data.
        at System.Web.Configuration.MachineKeySection.EncryptOrDecryptData(
        Boolean fEncrypt, Byte[] buf, Byte[] modifier, Int32 start, 
        Int32 length, IVType ivType, Boolean useValidationSymAlgo, 
        Boolean signData)

这是我在 IIS 中用于 URL 重写的设置

Here is my settings in IIS for URL Rewrite

• 请求的 URL:匹配模式
• 使用:正则表达式
• 忽略大小写 - 已检查
• 条件 -输入:{HTTP_COOKIE}类型:匹配模式模式:.*
• 操作类型 - 重写
• 重写 URL - http://11.155.011.123{HTTP_URL}&USERNAME={PlatformAnalysisUrlProvider:{C:0}}

• Requested URL: Matches the Patterns
• Using: Regular Expression
• Ignore Case - Checked
• Conditions - Input : {HTTP_COOKIE} Type : Matches the Pattern Pattern : .*
• Action Type - Rewrite
• Rewrite URL - http://11.155.011.123{HTTP_URL}&USERNAME={PlatformAnalysisUrlProvider:{C:0}}

我也按照本论坛的建议设置了 MACHINE KEY

我已经推荐这篇文章用于开发

其中一个堆栈溢出帖子表明这可能是防火墙或防病毒问题.但是我没有安装杀毒软件或防火墙.

One of the stack overflow post suggested that it might be firewall or antivirus issue. But I do not have antivirus installed or firwall enabled.

如果有人将我引导到使用 IIS 和 URL 重写提供程序托管的网站的代码示例，这真的很有帮助.

It really helps if someone direct me to code sample where web site hosted in IIS and URL Rewrite provider is used.

更新错误日志

MODULE_SET_RESPONSE_ERROR_STATUS通知 - PRE_BEGIN_REQUEST"HttpReason - URL 重写模块错误"

MODULE_SET_RESPONSE_ERROR_STATUS Notification - "PRE_BEGIN_REQUEST" HttpReason - "URL Rewrite Module Error"

使用机器密钥信息更新帖子

     <MachineKey Description="AES" validation="SHA1"
      descriptionKey="******"
      validationKey="******" CompatibilityMode="Framework20SP2">

可能的原因 - 创建 cookie 的网站是使用 .NET Framework 4.5 开发的.我们读取 cookie 的提供者是 Framework 3.5.这可能是原因吗?或者我们是否需要 Provider 项目的配置文件?

Reason May be - The website where cookie getting created is developed using .NET Framework 4.5. The provider where we reading the cookie is Framework 3.5. Is this may be the cause? OR Do we need config file for Provider project?

更新 - 我已将机器密钥添加到 Machine.config ，但它仍然不起作用:(

Updates - I have added machine key to Machine.config , but it still did not work :(

替代解决方案

• 将 App.config 添加到类库

• Add App.config to class Library

 <?xml version="1.0" encoding="utf-8" ?>
 <configuration>
 <appSettings>
 <!-- ... -->
    <add key="SecurityKey" value="somevalue"/>
 <!-- ... -->
 </appSettings>
 </configuration>

<rule name="Get cookie value" stopProcessing="true">
    <match url="^getcookie" />
    <action type="Redirect" url="/?Cookie={HTTP_COOKIE}" appendQueryString="false" redirectType="Found" />
</rule>