SoapHeader为webservice的头部信息，头部信息可用于相关的验证等功能
在webservice服务端定义SoapHeader类，继承自SoapHeader
/// <summary>
/// 用于webservice认证
/// </summary>
public class CertficateSoapHeader : SoapHeader
{
/// <summary>
/// 属性
/// </summary>
public string UserName { get; set; }
public string PassWord { get; set; }
public CertficateSoapHeader() { }
/// <summary>
/// 构造函数认证
/// </summary>
/// <param name="userName">用户名</param>
/// <param name="passWord">密码</param>
public CertficateSoapHeader(string userName, string passWord)
{
this.UserName = userName;
this.PassWord = passWord;
}
}
服务类中：
public class BotWebService : System.Web.Services.WebService
{
public CertficateSoapHeader soapHeader;
[SoapHeader("soapHeader",Direction=SoapHeaderDirection.In)]//这里的声明必需和上次的名字对应
[WebMethod]
public string HelloWorld()
{
if (myHeader.UserName == null || myHeader.PassWord == null)
{
break;
}
if (myHeader.UserName.Equals("LY") && myHeader.PassWord.Equals("LY"))
{
return "Hello World";
break;
}
else
{
throw new SoapHeaderException("认证失败", SoapException.ClientFaultCode);}
}
客户端调用：
BotWebServiceSoapClient service = new BotWebServiceSoapClient();
// BotWebService service = new BotWebService();
CertficateSoapHeader header = new CertficateSoapHeader();
header.UserName = "LY";
header.PassWord = "LY";
service.CertficateSoapHeaderValue = header;
string aa = service.HelloWorld(header);
这样就能正常返回，如果不定义,就不能认证
这种方式实现起来比较简单，但在webservice中每个webmethod方法中都必须加上if。。else。。的判断条件，使用起来不够灵活，从软件设计的角度讲藕合性太强，
一般的权限认证和日志认证，一般会用动态代理来处理相关问题. 而在webservice中一般用SoapExtensionAttribute和SoapExtension方法来处理。