<\/div>\n
Merhaba,
\nWeb Service uygulamalar\u0131nda g\u00fcvenli\u011fin ne kadar \u00f6nemli oldu\u011funu ve iki t\u00fcrl\u00fc g\u00fcvenlik oldu\u011funu, Web Service Session Bazl\u0131 G\u00fcvenlik<\/a> yaz\u0131mda bahsetmi\u015ftim.Ba\u015fl\u0131ktanda anla\u015f\u0131laca\u011f\u0131 gibi Session bazl\u0131 g\u00fcvenli\u011fi o yaz\u0131mda anlatm\u0131\u015f bulunmaktay\u0131m.
\n\u015eimdi ise Web Service’lerde SoapHeader ile g\u00fcvenli\u011fin nas\u0131l al\u0131nd\u0131\u011f\u0131n\u0131 inceleyece\u011fiz.
\nBir \u00f6nceki yaz\u0131m\u0131nda oldu\u011fu gibi malzeme ismi ve adet say\u0131s\u0131n\u0131 olu\u015fturdu\u011fumuz Web Service alacak ve bunu belirtilen herhangi bir veri kayna\u011f\u0131na i\u015fleyecektir.Bu durumun SoapHeader ile g\u00fcvenli\u011fini alal\u0131m.\u00d6ncelikle bir Web Service olu\u015ftural\u0131m ve gerekli metodumuzu haz\u0131rlayal\u0131m.<\/p>\n
Tabi \u00f6ncelikle bu yaz\u0131m\u0131 okumadan \u00f6nce Web Service Kullan\u0131m\u0131<\/a> ve Web Service Olu\u015fturma<\/a> ba\u015fl\u0131kl\u0131 yaz\u0131lar\u0131m\u0131 okuman\u0131z\u0131 tavsiye ederim.<\/p>\n
Ben NeKacAdet.asmx ad\u0131nda bir Web Service olu\u015fturuyorum.<\/p>\n
\r\n    [WebService(Namespace = "http:\/\/tempuri.org\/")]\r\n    [WebServiceBinding(ConformsTo = WsiProfiles.BasicProfile1_1)]\r\n    [System.ComponentModel.ToolboxItem(false)]\r\n    public class NeKacAdet : System.Web.Services.WebService\r\n    {\r\n        [WebMethod]\r\n        public void SiparisVer(int Adet, string UrunAdi)\r\n        {\r\n            StreamWriter SiparisKayit = new StreamWriter("C:\/Dosya\/SiparisKayit.txt", true);\r\n            \/\/C:\/Dosya\/SiparisKayit.txt dosyas\u0131n\u0131n mevcut oldu\u011funu varsay\u0131yorum.\r\n            SiparisKayit.WriteLine("\u00dcr\u00fcn Ad\u0131=" + UrunAdi);\r\n            SiparisKayit.WriteLine("Urun Adedi=" + Adet);\r\n            SiparisKayit.Close();\r\n        }\r\n    }\r\n<\/pre>\nYukar\u0131daki kodlar\u0131 incelerseniz e\u011fer, NeKacAdet.asmx ad\u0131ndaki Web Service’imizin i\u00e7ine “SiparisVer” ad\u0131nda int ve string tipinde iki parametre alan bir metod yazd\u0131k.G\u00f6rd\u00fc\u011f\u00fcn\u00fcz gibi temel senaryomuzu ger\u00e7ekle\u015ftiren ama g\u00fcvenli\u011fi olmayan bir metod.\u015eu durumda Web Service’i kullanan birisi binlerce kez gereksiz sipari\u015f yapabilir.Bizim i\u00e7in sistemimizde bulunan ya da bizim belirledi\u011fimiz kullan\u0131c\u0131lar\u0131n bu Web Service’den sipari\u015f vermelerini sa\u011flamakt\u0131r.<\/p>\n
Web Service’imizi projemize y\u00fckler ve SiparisVer() ismindeki metodumuzu gerekli parametrelerde \u00e7al\u0131\u015ft\u0131r\u0131rsak g\u00f6rd\u00fc\u011f\u00fcn\u00fcz gibi(sizinde denedi\u011finizi varsay\u0131yorum) gayet g\u00fczel bir \u015fekilde SiparisKayit.txt dosyas\u0131na verilemizi eklemi\u015ftir.<\/p>\n
Ben kendi projeme “NeKacAdet” isminde bu Web Service’i ekliyorum.<\/p>\n\r\n    public partial class Form1 : Form\r\n    {\r\n        public Form1()\r\n        {\r\n            InitializeComponent();\r\n        }\r\n        NeKacAdet.NeKacAdetSoapClient NeKac = new NeKacAdet.NeKacAdetSoapClient();\r\n        private void Form1_Load(object sender, EventArgs e)\r\n        {\r\n            NeKac.SiparisVer(5, "Kalem");\r\n        }\r\n    }\r\n<\/pre>\nFormumuz y\u00fcklendi\u011fi anda Web Service’imizdeki “SiparisVer” ad\u0131ndaki metodumuzu gerekli parametrelerini doldurup \u00e7a\u011f\u0131r\u0131yoruz.E\u011fer “C:\/Dosya\/SiparisKayit.txt” dizinini a\u00e7arsak, dosyam\u0131zda gerekli verilerin kaydedildi\u011fini g\u00f6r\u00fcyoruz.
\n\u015eimdi SoapHeader ile bu Web Service’imize g\u00fcvenlik uygulamas\u0131 yapal\u0131m.
\n\u00d6ncelikle SoapHeader g\u00fcvenli\u011fini almak istiyorsak, Web Service’imizin bulundu\u011fu projede bir class olu\u015fturmal\u0131 ve bu class\u0131n System.Web.Services.Protocols Namespace’inde bulunan SoapHeader s\u0131n\u0131f\u0131ndan kal\u0131t\u0131m ald\u0131rmal\u0131y\u0131z.G\u00fcvenlik \u015fartlar\u0131m\u0131z\u0131 bu s\u0131n\u0131fta \u015femaland\u0131rmal\u0131y\u0131z.<\/p>\n
\u00d6rne\u011fimize devam edersek e\u011fer; Web Service’imizin bulundu\u011fu projeye SoapHeaderGuvenlik.cs ad\u0131nda bir s\u0131n\u0131f a\u00e7\u0131yorum ve bu s\u0131n\u0131fa SoapHeader s\u0131n\u0131f\u0131ndan kal\u0131t\u0131m ald\u0131r\u0131yorum.Senaryo olarak sadece kullan\u0131c\u0131 ad\u0131 ve parola alaca\u011f\u0131m i\u00e7in bu iki de\u011feri ta\u015f\u0131yacak propertyleri olu\u015fturuyorum<\/p>\n\r\n    public class SoapHeaderGuvenlik:SoapHeader\r\n    {\r\n        public string KullaniciAdi { get; set; }\r\n        public string Sifre { get; set; }\r\n    }\r\n<\/pre>\nYukar\u0131da g\u00f6r\u00fc\u011f\u00fcn\u00fcz gibi alaca\u011f\u0131m\u0131z g\u00fcvenli\u011fin \u015fartlar\u0131na uygun iki adet propertyi yazm\u0131\u015f bulunmaktay\u0131z.\u015eimdi NeKacAdet.asmx ad\u0131ndaki Web Service’imize gelip, olu\u015fturdu\u011fumuz bu class ile nas\u0131l g\u00fcvenlik al\u0131n\u0131yormu\u015f onu inceleyelim.<\/p>\n\r\n    [WebService(Namespace = "http:\/\/tempuri.org\/")]\r\n    [WebServiceBinding(ConformsTo = WsiProfiles.BasicProfile1_1)]\r\n    [System.ComponentModel.ToolboxItem(false)]\r\n    public class NeKacAdet : System.Web.Services.WebService\r\n    {\r\n        public SoapHeaderGuvenlik KullaniciKontrol;\r\n        \/\/Web Service'imizin bulundu\u011fu projemizde olu\u015fturdu\u011fumuz SoapHeaderGuvenlik.cs s\u0131n\u0131f\u0131ndan bir referans olu\u015fturuyoruz.\r\n        \/\/Dikkat ederseniz nesnesini alm\u0131yoruz.\r\n        [WebMethod]\r\n        public bool SiparisVer(int Adet, string UrunAdi)\r\n        {\r\n            if (KullaniciKontrol.KullaniciAdi == "Gencay" && KullaniciKontrol.Sifre == "123321")\r\n            {\r\n                StreamWriter SiparisKayit = new StreamWriter("C:\/Dosya\/SiparisKayit.txt", true);\r\n                SiparisKayit.WriteLine("\u00dcr\u00fcn Ad\u0131=" + UrunAdi);\r\n                SiparisKayit.WriteLine("Urun Adedi=" + Adet);\r\n                SiparisKayit.Close();\r\n                return true;\r\n            }\r\n            return false;\r\n        }\r\n    }\r\n<\/pre>\nG\u00f6rd\u00fc\u011f\u00fcn\u00fcz gibi NeKacAdet.asmx Web Service’imizdeki “SiparisVer” ad\u0131ndaki metodumuzu de\u011fi\u015ftiriyoruz.Burada dikkat etmeniz gereken olu\u015fturdu\u011fumuz SoapHeaderGuvenlik.cs ad\u0131ndaki s\u0131n\u0131f\u0131m\u0131zdan bir referans noktas\u0131 al\u0131yoruz.Ancak nesnesini alm\u0131yoruz ve bu referans noktas\u0131n\u0131 kullanarak kullan\u0131c\u0131 ad\u0131 ve \u015fifre kontrol\u00fc yap\u0131yoruz.Burada ben manuel olarak kullan\u0131c\u0131 ad\u0131n\u0131 “Gencay” \u015fifreyi ise “123321” olarak yazd\u0131m.Sizler bunlar\u0131 parametre olarak alabilirsiniz.
\nAyriyetten SiparisVer metodu geriye bool tipinde de\u011fer g\u00f6ndermesini istedim.E\u011fer true g\u00f6nderirse, demek ki verilerin kay\u0131d\u0131 yap\u0131lm\u0131\u015f, false ise yap\u0131lmam\u0131\u015f oldu\u011funu anlayaca\u011f\u0131z ve ona g\u00f6re mesaj verdirece\u011fiz.<\/p>\n
\u015eimdi bu Web Service’imizi kulland\u0131\u011f\u0131m\u0131z projemize gelip “NeKacAdet” ad\u0131ndaki Web Service’imize sa\u011f t\u0131klay\u0131p “Update Service Referance” diyerek, Web Service’imizin son versiyonunu g\u00fcncelliyoruz.<\/p>\n\r\n        NeKacAdet.NeKacAdetSoapClient NeKac = new NeKacAdet.NeKacAdetSoapClient();\r\n\r\n        private void Form1_Load(object sender, EventArgs e)\r\n        {\r\n            if (NeKac.SiparisVer(50, "Silgi"))\r\n                MessageBox.Show("Kay\u0131t Yap\u0131lm\u0131\u015ft\u0131r.");\r\n            else\r\n            {\r\n                MessageBox.Show("Kullan\u0131c\u0131 ad\u0131 ve \u015fifrenizi kontrol ediniz.");\r\n            }\r\n        }\r\n<\/pre>\nE\u011fer bu \u015fekilde kodlar\u0131 \u00e7al\u0131\u015ft\u0131r\u0131rsan\u0131z, “NullReferanceException” ad\u0131ndaki hatayla kar\u015f\u0131la\u015facaks\u0131n\u0131z.Bu hata bize<\/p>\n\r\nObject reference not set to an instance of an object.\r\n<\/pre>\nmesaj\u0131n\u0131 verecektir.
\nBu hatay\u0131 vurgulamaya \u00e7al\u0131\u015ft\u0131\u011f\u0131m yeri g\u00f6sterebilmek i\u00e7in nerede verdi\u011finide sizlere g\u00f6stermem laz\u0131m.Bu y\u00fczden a\u015fa\u011f\u0131daki ekran g\u00f6r\u00fcnt\u00fcs\u00fcn\u00fc inceleyiniz.
\n<\/a>
\nG\u00f6rd\u00fc\u011f\u00fcn\u00fcz gibi “SoapHeaderGuvenlik” tipinden “KullaniciKontrol” ad\u0131ndaki, referans\u0131m\u0131zda vermektedir.
\nBu ne demektir?
\nBiz “SoapHeaderGuvenlik.cs” s\u0131n\u0131f\u0131n\u0131n bir referans\u0131n\u0131 kulland\u0131k ama nesnesini \u00fcretmedik.Bu referans\u0131n i\u00e7indeki g\u00fcvenlik \u015fartlar\u0131 olan kullan\u0131c\u0131 ad\u0131 ve \u015fifresini kontrol edip metodun i\u015flevini ona g\u00f6re de\u011ferlendirdik.Ama nesnesi olu\u015fmam\u0131\u015f bir referans verileri nerde, nas\u0131l, hangi mant\u0131kla tutabilir.Eee o halde bizim bu nesneyi olu\u015fturmam\u0131z gerekiyor.
\nBu nesneyi “SiparisVer” isimli metodumuzu web metod olarak g\u00f6steren [WebMethod] attribute’un yan\u0131na [SoapHeader(“ReferansAdi”)] attribute’unu yazarak olu\u015fturabiliriz.<\/p>\n
\r\n        public SoapHeaderGuvenlik KullaniciKontrol;\r\n        [WebMethod][SoapHeader("KullaniciKontrol")]\r\n        public bool SiparisVer(int Adet, string UrunAdi)\r\n        {\r\n            if (KullaniciKontrol.KullaniciAdi == "Gencay" && KullaniciKontrol.Sifre == "123321")\r\n            {\r\n                StreamWriter SiparisKayit = new StreamWriter("C:\/Dosya\/SiparisKayit.txt", true);\r\n                SiparisKayit.WriteLine("\u00dcr\u00fcn Ad\u0131=" + UrunAdi);\r\n                SiparisKayit.WriteLine("Urun Adedi=" + Adet);\r\n                SiparisKayit.Close();\r\n                return true;\r\n            }\r\n            return false;\r\n        }\r\n<\/pre>\nYukar\u0131da g\u00f6rd\u00fc\u011f\u00fcn\u00fcz gibi [SoapHeader(“KullaniciKontrol”)] attribute’u sayesinde SoapHeaderGuvenlik tipinden olan KullaniciKontrol referans\u0131na bir nesne ba\u011fl\u0131yoruz.<\/p>\n\u015eimdi tekrardan Web Service’imizi update ederek projemizde “SiparisVer” metodunu inceliyoruz.
\n<\/a>
\nG\u00f6r\u00fcnt\u00fcde g\u00f6rd\u00fc\u011f\u00fcn\u00fcz gibi, [SoapHeader(“KullaniciKontrol”)] attribute’u sayesinde SoapHeaderGuvenlik tipinden KullaniciKontrol referans\u0131na nesneyi ba\u011flam\u0131\u015ft\u0131k.S\u00f6z konusu attribute “SiparisVer” metodunun attribute’u oldu\u011fu i\u00e7inde, metodu kullan\u0131rken ilk parametre olarak SoapHeaderGuvenlik tipinden otomatik olarak bizden nesne istemektedir.<\/p>\n
Buradaki mant\u0131\u011f\u0131 anlaman\u0131z\u0131 istiyorum.[SoapHeader(“KullaniciKontrol”)] attribute’u ile “SiparisVer” metodunda SoapHeader g\u00fcvenli\u011fini yapaca\u011f\u0131m\u0131z, SoapHeader s\u0131n\u0131f\u0131ndan kal\u0131t\u0131m alm\u0131\u015f, SoapHeaderGuvenlik ad\u0131ndaki s\u0131n\u0131f\u0131n referans\u0131na nesne ba\u011flatt\u0131r\u0131yoruz.Bu nesneyide bu metodu kullan\u0131rken, proje taraf\u0131ndan kullan\u0131c\u0131dan istemektedir.<\/p>\n
\u015eimdi kafalar\u0131n\u0131zdaki soruyu tahmin edebiliyorum.
\nPeki bu nesneyi Web Service kullan\u0131c\u0131s\u0131 nas\u0131l, nerden bulacakta bu parametreye verecek.<\/p>\n
NeKacAdet namespace’i \u00fczerinden SoapHeaderGuvenlik s\u0131n\u0131f\u0131 \u00fczerinden eri\u015febilece\u011fiz.
\nA\u015fa\u011f\u0131daki kodlar\u0131 incelersek e\u011fer,<\/p>\n
\r\n        NeKacAdet.NeKacAdetSoapClient NeKac = new NeKacAdet.NeKacAdetSoapClient();\r\n        NeKacAdet.SoapHeaderGuvenlik GuvenlikNesnesi = new NeKacAdet.SoapHeaderGuvenlik();\r\n        \/\/G\u00f6rd\u00fc\u011f\u00fcn\u00fcz gibi NeKacAdet namespace'i \u00fczerinden SoapHeaderGuvenlik s\u0131n\u0131f\u0131n\u0131n instance'\u0131n\u0131 ald\u0131k.\r\n        private void Form1_Load(object sender, EventArgs e)\r\n        {\r\n            GuvenlikNesnesi.KullaniciAdi = "Gencay";\r\n            GuvenlikNesnesi.Sifre = "123321";\r\n            \/\/Bu instance'\u0131n "KullaniciAdi" ve "Sifre" propertylerine gerekli de\u011ferlerini girdik.\r\n            if (NeKac.SiparisVer(GuvenlikNesnesi,50,"Silgi"))\r\n                MessageBox.Show("Kay\u0131t Yap\u0131lm\u0131\u015ft\u0131r.");\r\n            else\r\n            {\r\n                MessageBox.Show("Kullan\u0131c\u0131 ad\u0131 ve \u015fifrenizi kontrol ediniz.");\r\n            }\r\n        }\r\n<\/pre>\nSonu\u00e7 olarak kullan\u0131c\u0131 ad\u0131 ve \u015fifreyi do\u011fru girerseniz “Kay\u0131t Yap\u0131lm\u0131\u015ft\u0131r.” mesaj\u0131 alacaks\u0131n\u0131z.Aksi taktirde di\u011fer kay\u0131t i\u015flemi yap\u0131lmayacakt\u0131r.<\/p>\n
Evet art\u0131k yaz\u0131m\u0131z\u0131n sonuna gelmi\u015f bulunmaktay\u0131z.Umar\u0131m SoapHeader ile g\u00fcvenlikte a\u015final\u0131\u011f\u0131n\u0131z olmu\u015ftur.
\nFaydalanman\u0131z dile\u011fiyle..
\n\u0130yi \u00c7al\u0131\u015fmalar…<\/p>\n","protected":false},"excerpt":{"rendered":"
Merhaba, Web Service uygulamalar\u0131nda g\u00fcvenli\u011fin ne kadar \u00f6nemli oldu\u011funu ve iki t\u00fcrl\u00fc g\u00fcvenlik oldu\u011funu, Web Service Session Bazl\u0131 G\u00fcvenlik yaz\u0131mda bahsetmi\u015ftim.Ba\u015fl\u0131ktanda anla\u015f\u0131laca\u011f\u0131 gibi Session bazl\u0131 g\u00fcvenli\u011fi o yaz\u0131mda anlatm\u0131\u015f bulunmaktay\u0131m. \u015eimdi ise Web Service’lerde...<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10,12],"tags":[185,279,244],"class_list":["post-915","post","type-post","status-publish","format-standard","hentry","category-asp-net","category-c-sharp-c","tag-guvenlik","tag-soapheader","tag-web-service"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/comments?post=915"}],"version-history":[{"count":0,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/posts\/915\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/media?parent=915"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/categories?post=915"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gencayyildiz.com\/blog\/wp-json\/wp\/v2\/tags?post=915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}