Question

I have a custrom soapheader that looks like this :

[DataContract()]
    public class IntegrationHeader
    {
        [DataMember]
        public string UserName;
        [DataMember]
        public string Password;
    }

Then I have the following code in a messageInspector :

if (request.Headers.Action == null || request.Headers.Action.ToString().Length < 1)
                return null;

            foreach (var header in request.Headers)
            {
                if (header.Namespace == "ns" && header.Name == "SecurityToken")
                {
                    loginHandler = new LoginHandler();

                    integrationHeader = request.Headers.GetHeader<IntegrationHeader>(header.Name, header.Namespace);
                    if ((userContext = loginHandler.LoginUser(integrationHeader.UserName, PassWordManager.DESEncrypt(integrationHeader.Password), Business.Entity.LoginType.Regular)) == null)
                        throw new SecurityTokenException("Unknown username or invalid password");

                    Thread.CurrentPrincipal = userContext;

                    return null;
                }
            }

            throw new SecurityTokenException("Unknown username or invalid password");

When sending the following soap header with soapui it works fine :

   <soapenv:Header>
     <SecurityToken xmlns="ns" xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
       <Password xmlns="MyApp.ServiceImplementation">X</Password>
       <UserName xmlns="MyApp.ServiceImplementation">X</UserName>
     </SecurityToken>
   </soapenv:Header>

Then I try to do this from within a proxy generated WCF client :

using (client = new MyProxy())
{

                IntegrationHeader ih = new IntegrationHeader { UserName = "X", Password = "X" };

                MessageHeader untyped = MessageHeader.CreateHeader("SecurityToken", "ns", ih);
                using (new System.ServiceModel.OperationContextScope(client.InnerChannel))
                {
                    OperationContext.Current.OutgoingMessageHeaders.Add(untyped);
                }

                client.GetData(request);
            }

The problem is that there will be only 2 headers in the messageInspector when running this code and none of them will be the security header?

What am I doing wrong?

Answer 1

This is the correct solution :

            IntegrationHeader ih = new IntegrationHeader { UserName = "X", Password = "X" };

            MessageHeader untyped = MessageHeader.CreateHeader("SecurityToken", "ns", ih);
            using (new System.ServiceModel.OperationContextScope(client.InnerChannel))
            {
                OperationContext.Current.OutgoingMessageHeaders.Add(untyped);
                client.GetData(request);
            }

The service call most be done within the using else the security header will be removed from the outgoing context.