Implementing WS-SecureConversation in Microsoft IssueVision

using System;
using System.ComponentModel;
using System.Data;
using System.Web.Services;
using System.Web.Services.Protocols;
using Microsoft.Web.Services2;
using Microsoft.Web.Services2.Security;
using Microsoft.Web.Services2.Security.Tokens;

namespace IssueVisionWebWseCS
{
	/// <summary>
	/// Summary description for IssueVisionServices.
	/// </summary>
	[WebServiceAttribute(Namespace="http://issueVision.org/IssueVisionWebWseCS/IssueVisionServices")]
	public class IssueVisionServices : System.Web.Services.WebService
	{
		public IssueVisionServices()
		{
			//CODEGEN: This call is required by the ASP.NET Web Services Designer
			InitializeComponent();
		}

		#region Component Designer generated code
		
		//Required by the Web Services Designer 
		private IContainer components = null;
				
		/// <summary>
		/// Required method for Designer support - do not modify
		/// the contents of this method with the code editor.
		/// </summary>
		private void InitializeComponent()
		{
		}

		/// <summary>
		/// Clean up any resources being used.
		/// </summary>
		protected override void Dispose( bool disposing )
		{
			if(disposing && components != null)
			{
				components.Dispose();
			}
			base.Dispose(disposing);		
		}
		
		#endregion

		// Retrieves the IssueVision lookup tables.
		[WebMethod(Description="Returns the lookup tables for IssueVision.")]
		public IVDataSet GetLookupTables()
		{
			SoapContext requestContext = RequestSoapContext.Current;

			// Reject any requests which are not valid SOAP requests
			Wse2HelperServer.VerifyMessageParts(requestContext);
			Wse2HelperServer.VerifyMessageSignature(requestContext);
			Wse2HelperServer.VerifyMessageEncryption(requestContext);

			// Check if the Soap Message is Signed with an SCT.
			SecurityContextToken sct = Wse2HelperServer.GetSigningToken(requestContext) as SecurityContextToken;
			if (sct == null)
			{
				throw new SoapException("The request is not signed with an SCT.", SoapException.ServerFaultCode, "Security");
			}

			// Use the SCT to sign and encrypt the response
			SoapContext responseContext = ResponseSoapContext.Current;
			responseContext.Security.Tokens.Add(sct);
			responseContext.Security.Elements.Add(new MessageSignature(sct));
			responseContext.Security.Elements.Add(new EncryptedData(sct));

			return new IVData().GetLookupTables();
		}

		// The first argument of the SendReceiveIssues method is a diffgram of 
		// changes only.  It's generated by dataset.GetChanges(), which returns 
		// an untyped dataset.  There's no need (or benefit) for this diffgram to 
		// be typed.
		[WebMethod(Description="Synchronize data by send and recieving from the remote client.")]
		public IVDataSet SendReceiveIssues(DataSet changedIssues, DateTime lastAccessed)
		{
			SoapContext requestContext = RequestSoapContext.Current;

			// Reject any requests which are not valid SOAP requests
			Wse2HelperServer.VerifyMessageParts(requestContext);
			Wse2HelperServer.VerifyMessageSignature(requestContext);
			Wse2HelperServer.VerifyMessageEncryption(requestContext);

			// Check if the Soap Message is Signed with an SCT.
			SecurityContextToken sct = Wse2HelperServer.GetSigningToken(requestContext) as SecurityContextToken;
			if (sct == null)
			{
				throw new SoapException("The request is not signed with an SCT.", SoapException.ServerFaultCode, "Security");
			}

			// Use the SCT to sign and encrypt the response
			SoapContext responseContext = ResponseSoapContext.Current;
			responseContext.Security.Tokens.Add(sct);
			responseContext.Security.Elements.Add(new MessageSignature(sct));
			responseContext.Security.Elements.Add(new EncryptedData(sct));

			return new IVData().SendReceiveIssues(changedIssues, lastAccessed);
		}
	}
}