c# – Windows安全自定义登录验证

我想知道是否可以使用CredUIPromptForWindowsCredentials.

>显示Windows安全对话框
>获取输入的用户名&密码
>执行自定义验证
>如果验证成功 – >继续app
>如果验证失败,则为> – > – 告知用户无效的用户名或密码

我已经看过Windows Security login form?和http://www.pinvoke.net/default.aspx/credui/creduipromptforwindowscredentials.html?diff=y,但他们没有解释如何处理验证.

我真的很喜欢一个小例子,如果用户输入username =“Bo”和password =“123”,则其他成功显示错误消息并允许用户再次尝试.

该应用程序将安装在多台计算机上.

或者这根本不可能？

更新

灵感来自这个问题Show Authentication dialog in C# for windows Vista/7的答案

我修改了代码以按预期工作.

请注意,验证部分仅用于概念验证.

WindowsSecurityDialog.cs

public class WindowsSecurityDialog
    {

       public string CaptionText { get; set; }
       public string MessageText { get; set; }

        [DllImport("ole32.dll")]
        public static extern void CoTaskMemFree(IntPtr ptr);

        [StructLayout(LayoutKind.Sequential,CharSet = CharSet.Auto)]
        private struct CREDUI_INFO
        {
            public int cbSize;
            public IntPtr hwndParent;
            public string pszMessageText;
            public string pszCaptionText;
            public IntPtr hbmBanner;
        }


        [DllImport("credui.dll",CharSet = CharSet.Auto)]
        private static extern bool CredUnPackAuthenticationBuffer(int dwFlags,IntPtr pAuthBuffer,uint cbAuthBuffer,StringBuilder pszUserName,ref int pcchMaxUserName,StringBuilder pszDomainName,ref int pcchMaxDomainame,StringBuilder pszPassword,ref int pcchMaxPassword);

        [DllImport("credui.dll",CharSet = CharSet.Auto)]
        private static extern int CredUIPromptForWindowsCredentials(ref CREDUI_INFO notUsedHere,int authError,ref uint authPackage,IntPtr InAuthBuffer,uint InAuthBufferSize,out IntPtr refOutAuthBuffer,out uint refOutAuthBufferSize,ref bool fSave,int flags);



        public bool ValidateUser()
        {
            var credui = new CREDUI_INFO
                                     {
                                         pszCaptionText = CaptionText,pszMessageText = MessageText
                                     };
            credui.cbSize = Marshal.SizeOf(credui);
            uint authPackage = 0;
            IntPtr outCredBuffer;
            uint outCredSize;
            bool save = false;


            const int loginErrorCode = 1326;    //Login Failed
            var authError = 0;

            while (true)
            {




                var result = CredUIPromptForWindowsCredentials(ref credui,authError,ref authPackage,IntPtr.Zero,out outCredBuffer,out outCredSize,ref save,1 /* Generic */);

                var usernameBuf = new StringBuilder(100);
                var passwordBuf = new StringBuilder(100);
                var domainBuf = new StringBuilder(100);

                var maxUserName = 100;
                var maxDomain = 100;
                var maxPassword = 100;
                if (result == 0)
                {
                    if (CredUnPackAuthenticationBuffer(0,outCredBuffer,outCredSize,usernameBuf,ref maxUserName,domainBuf,ref maxDomain,passwordBuf,ref maxPassword))
                    {
                        //TODO: ms documentation says we should call this but i can't get it to work
                        //SecureZeroMem(outCredBuffer,outCredSize);

                        //clear the memory allocated by CredUIPromptForWindowsCredentials 
                        CoTaskMemFree(outCredBuffer);
                        var networkCredential = new NetworkCredential()
                                                {
                                                    UserName = usernameBuf.ToString(),Password = passwordBuf.ToString(),Domain = domainBuf.ToString()
                                                };

                        //Dummy Code replace with true User Validation
                        if (networkCredential.UserName == "Bo" && networkCredential.Password == "1234")
                            return true;
                        else //login failed show dialog again with login error
                        {
                            authError = loginErrorCode;
                        }



                    }
                }
                else return false;


            }
        }
    }

App.xaml.cs

protected override void OnStartup(StartupEventArgs e)
        {
            var windowsSecurityDialog = new WindowsSecurityDialog
                                            {
                                                CaptionText = "Enter your credentials",MessageText = "These credentials will be used to connect to YOUR APP NAME";
                                            };

            if (windowsSecurityDialog.ValidateUser())
                base.OnStartup(e);
        }