ASP.NET

namespace CustomAuthWithHTTPModule
{
    /// <summary>
    /// Summary description for SecureWebService
    /// </summary>
    public class Authentication : SoapHeader
    {
        public string User;
        public string Password;
    }

    public class SecureWebService : WebService
    {
        public Authentication authentication;

        [WebMethod]
        [SoapHeader("authentication", Required = true)]
        public string ValidUser()
        {
            if (User.IsInRole("Customer"))
                return "User is in role customer";

            if (User.Identity.IsAuthenticated)
                return "User is a valid user";
            return "not authenticated";
        }

    }

}

ServiceReference1.SecureWebServiceSoapClient xx = new ServiceReference1.SecureWebServiceSoapClient();

            ServiceReference1.Authentication a = new ServiceReference1.Authentication();
            a.User = "Hello";
            a.Password = "Hello";
            xx.AuthHeaderValue  or xx.UserCredentialsValue // not being expose

namespace EncryptASMX
{
    /// <summary>
    /// Summary description for Test1
    /// </summary>
    [WebService(Namespace = "http://tempuri.org/")]
    [WebServiceBinding(ConformsTo = WsiProfiles.BasicProfile1_1)]
    [System.ComponentModel.ToolboxItem(false)]
    // To allow this Web Service to be called from script, using ASP.NET AJAX, uncomment the following line. 
    // [System.Web.Script.Services.ScriptService]
    public class Test1 : System.Web.Services.WebService
    {
        public AuthenticateHeader Credentials;

        [AuthExtension]
        [SoapHeader("Credentials", Required = true)]
        [WebMethod]
        public string Add(int x, int y)
        {
            return (x + y).ToString();
        }
    }

    public class AuthenticateHeader : SoapHeader
    {
        public string UserName;
        public string Password;
    }

    [AttributeUsage(AttributeTargets.Method)]
    public class AuthExtensionAttribute : SoapExtensionAttribute
    {
        int _priority = 1;

        public override int Priority
        {
            get { return _priority; }
            set { _priority = value; }
        }

        public override Type ExtensionType
        {
            get { return typeof(AuthExtension); }
        }
    }

    public class AuthExtension : SoapExtension
    {
        public override void ProcessMessage(SoapMessage message)
        {
            if (message.Stage == SoapMessageStage.AfterDeserialize)
            {
                //Check for an AuthHeader containing valid
                //credentials
                foreach (SoapHeader header in message.Headers)
                {
                    if (header is AuthenticateHeader)
                    {
                        AuthenticateHeader credentials = (AuthenticateHeader)header;
                        if (credentials.UserName.ToLower() ==
                            "jeff" &&
                            credentials.Password.ToLower() ==
                            "imbatman")
                            return; // Allow call to execute
                        break;
                    }
                }

                // Fail the call if we get to here. Either the header
                // isn't there or it contains invalid credentials.
                throw new SoapException("Unauthorized",
                    SoapException.ClientFaultCode);
            }
        }

        public override Object GetInitializer(Type type)
        {
            return GetType();
        }

        public override Object GetInitializer(LogicalMethodInfo info,
            SoapExtensionAttribute attribute)
        {
            return null;
        }

        public override void Initialize(Object initializer)
        {
        }
    }
}

<?xml version="1.0"?>

<!--
  For more information on how to configure your ASP.NET application, please visit
  http://go.microsoft.com/fwlink/?LinkId=169433
  -->

<configuration>
    <system.web>
      <compilation debug="true" targetFramework="4.5" />
      <httpRuntime targetFramework="4.5" />

      <webServices>
        <soapExtensionTypes>
          <add type="EncryptASMX.AuthExtension,EncryptASMX" priority="1"  />
        </soapExtensionTypes>
      </webServices>

    </system.web>

</configuration>

 string custsrc = custsrccode.Text;            
            string name = custname.Text;
            string city = custcity.Text;
            string state = custstate.Text;
            string postcode = custpostalcode.Text;
            string actcode = activitycode.SelectedItem.Text;
            string id = labelID.Text;
            string activityid = labelactivityid.Text;

  OracleConnection conn = new OracleConnection();  // C#
                conn.ConnectionString = strConnection;
                conn.Open();

                OracleCommand cmd = new OracleCommand();
                cmd.Connection = conn;
                cmd.CommandText = "INSERT INTO BUYING_ACTIVITY (CUSTOMER_SOURCE_CODE, CUSTOMER_NAME, CUSTOMER_CITY, CUSTOMER_STATE, CUSTOMER_POSTAL_CODE, BUYING_ACTIVITY_CODE, ID) " +
                "VALUES (:custsrc, :name, :city, :state, :postcode, :actcode, :id)";


                cmd.Parameters.Add(new OracleParameter("custsrc", custsrc));
                cmd.Parameters.Add(new OracleParameter("name", name));
                cmd.Parameters.Add(new OracleParameter("city", city));
                cmd.Parameters.Add(new OracleParameter("state", state));
                cmd.Parameters.Add(new OracleParameter("postcode", postcode));
                cmd.Parameters.Add(new OracleParameter("actcode", actcode));
                cmd.Parameters.Add(new OracleParameter("id", id));

                cmd.ExecuteNonQuery();
                
                conn.Close();

Response.Redirect("contractinfo.aspx?Id=" + labelRID.Text);

string contnumber = contractnumber.Text;
            string solnumber = solicitationnumber.Text;
            string ordnumber = ordernumber.Text;
            string contstartdate = contractstartdate.Value;
            string contenddate = contractenddate.Value;
            string solstartdate = solicitationstartdate.Value;
            string solenddate = solicitationenddate.Value;
            string soltype = solicitationtype.Text;
            string pasnum = pasnumber.Text;
            string commnts = comments.Text;
            string contkind = contractkind.SelectedItem.Text;
            string conttype = contracttype.SelectedItem.Text;
            string ponum = ponumber.Text;
            string instrtype = instrumenttype.SelectedItem.Text;
            string totcontractamount = totalcontractamount.Text;
            string estimloddate = estloddate.Value;
            string contfirstname = contractfirstname.Text;
            string contmiddleinit = contractmiddleinit.Text;
            string contlastname = contractlastname.Text;
            string lodsigned = datelodsigned.Value;
            string contractid = contractinfoid.Text;

OracleConnection conn = new OracleConnection();  // C#
               conn.ConnectionString = strConnection;
               conn.Open();

               OracleCommand cmd = new OracleCommand();
               cmd.Connection = conn;
               cmd.CommandText = "UPDATE CONTRACT_INFO SET  CONTRACT_SELECTION = :contractselection, CONTRACT_NUMBER = :contnumber, SOLICITATION_NUMBER = :solnumber, ORDER_SELECTION = :orderselection, ORDER_NUMBER = :ordnumber, CONTRACT_START_PERIOD = to_date(:contstartdate, 'MM/DD/YYYY'), CONTRACT_END_PERIOD =  to_date(:contenddate, 'MM/DD/YYYY'), SOLICITATION_START_DATE = to_date(:solstartdate, 'MM/DD/YYYY'), SOLICITATION_END_DATE =  to_date(:solenddate, 'MM/DD/YYYY'), SOLICITATION_TYPE = :soltype, SURVEY_REQUESTED = :preaward, PAS_NUMBER = :pasnum, COMMENTS = :commnts, CONTRACT_KIND = :contkind, CONTRACT_TYPE = :conttype, PO_ASSOCIATED = :poselection, PO_NUMBER = :ponum, INSTRUMENT_TYPE = :instrtype, TOTAL_CONTRACT_AMOUNT = :totcontractamount, EST_LOD_COMPLETION_DATE = to_date(:estimloddate, 'MM/DD/YYYY'), FIRST_NAME = :contfirstname, MIDDLE_INIT = :contmiddleinit, LAST_NAME = :contractlastname, DATE_LOD_SIGNED = to_date(:lodsigned, 'MM/DD/YYYY') CONTRACT_INFO_ID = :contractid";

               cmd.Parameters.Add(new OracleParameter("contractid", contractid));

               cmd.Parameters.Add(new OracleParameter("contractselection", contselection));
               cmd.Parameters.Add(new OracleParameter("contnumber", contnumber));
               cmd.Parameters.Add(new OracleParameter("solnumber", solnumber));
               cmd.Parameters.Add(new OracleParameter("orderselection", ordselection));
               cmd.Parameters.Add(new OracleParameter("ordnumber", ordnumber));
               cmd.Parameters.Add(new OracleParameter("contstartdate", contstartdate));
               cmd.Parameters.Add(new OracleParameter("contenddate", contenddate));
               cmd.Parameters.Add(new OracleParameter("solstartdate", solstartdate));
               cmd.Parameters.Add(new OracleParameter("solenddate", solenddate));
               cmd.Parameters.Add(new OracleParameter("soltype", soltype));
               cmd.Parameters.Add(new OracleParameter("preaward", preawardselection));
               cmd.Parameters.Add(new OracleParameter("pasnum", pasnum));
               cmd.Parameters.Add(new OracleParameter("commnts", commnts));
               cmd.Parameters.Add(new OracleParameter("contkind", contkind));
               cmd.Parameters.Add(new OracleParameter("conttype", conttype));
               cmd.Parameters.Add(new OracleParameter("poselection", purselection));
               cmd.Parameters.Add(new OracleParameter("ponum", ponum));
               cmd.Parameters.Add(new OracleParameter("instrtype", instrtype));
               cmd.Parameters.Add(new OracleParameter("totcontractamount", totcontractamount));
               cmd.Parameters.Add(new OracleParameter("estimloddate", estimloddate));
               cmd.Parameters.Add(new OracleParameter("contfirstname", contfirstname));
               cmd.Parameters.Add(new OracleParameter("contmiddleinit", contmiddleinit));
               cmd.Parameters.Add(new OracleParameter("contlastname", contlastname));
               cmd.Parameters.Add(new OracleParameter("lodsigned", lodsigned));



               cmd.ExecuteNonQuery();

               conn.Close();

OracleConnection conn = new OracleConnection();
            OracleCommand cmd = new OracleCommand();
            conn.ConnectionString = strConnection;
            conn.Open();

            cmd.Connection = conn;
            cmd.CommandText = "Select RID, CODE, CUSTOMER_NAME from ACTIVITY WHERE ID = :IDValue";
            //Add values to paramter
            cmd.Parameters.Add(new OracleParameter("IDValue", Request.QueryString["ID"]));

            OracleDataAdapter da = new OracleDataAdapter(cmd);
            cmd.CommandType = CommandType.Text;
            OracleDataReader dr = cmd.ExecuteReader();

            name.Text = dr["customer_name"].ToString();
            code.SelectedItem.Text = dr["code"].ToString();

            dr.Close();
            conn.Close();