Connecting to Repository Using Digital Signature: the OpenMetabase Operation

Below is the example of using the OpenMetabase operation to connect to a repository using digital signature. The certificate with the SPCERT identifier must be saved in the repository. The requested block is signed using the PFX certificate named sp.pfx.

SOAP request:

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">

<s:Body xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">

<id>PPREPOSITORY</id>

</tDef>

<id>pprepository</id>

</mbUser>

<user>

</user>

<certificate>SPCERT</certificate>

<signature>F3e+d3DUUa8fJgSr5ZQFiqsLMzWiIYoxe33S/lf1vVvZE298krx65EKkQJwCMBS4kUcN2dNqMtH5nKQqPtPR8Q8kt5mIgn/FmUfIcVXObt2l2kg0p0SH2Kn0apoWTHunE+gDitiGjAGxaMKpQc7FalZUnqKhbWdaTqjs+mSJCRW25TDbP2U3yaNbfeo8dPf+t2wZiB6ndx2AiOIN61WMaGL7oBOJwAyRVpFJbihDTm0IW4T/AJmZGO8hpgXV6NY8nvQVtIDcdc7esxfNWy318L20WG4qKB4f4NbhHSfmRMj8gplLUYTV3pFtuWeIkYDypcY/EG4PIO4v65dd1kPP4Q==</signature>

</verifier>

</tCreds>

</OpenMetabase>

</s:Body>

</s:Envelope>

SOAP response:

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">

<soapenv:Body>

</OpenMetabaseResult>

</soapenv:Body>

</soapenv:Envelope>

JSON request:

{
 "OpenMetabase" : 
  {
   "tDef" : 
    {
     "id" : "PPREPOSITORY"
    },
   "tCreds" : 
    {
     "pass" : "",
     "verifier" : 
      {
       "mbUser" : 
        {
         "id" : "pprepository"
        },
       "user" : 
        {
         "id" : "user@test.ru"
        },
       "certificate" : "SPCERT",
       "cookie" : "1437524055",
       "signature" : "AjTHCXJx6hs28GFsUNqrQlHoRSM6Zrj6Ax40n1nO+uE5zhVL9c8e5WFq4FUalSLWGIVWU0ymkEfVu62gzSn35yAen1kbtjOeQagbX0kG5MQhjVYMk8IVV8bLRIAUbuDah4vxlqTBjvPRsTFy5QU1pr0cYZdmHwdQSPKu7kZ9jS\/b1TOkPyRm8QrywVAU5MdqqR5oCN9qzAvDktTJXPU2a4BL0lRCAJuy0aYTXRU07J0Z5Jek2rUTQpJ1Qn7+zxew23SG\/M1Ma8w6k9+YQn5pokh43xbkpKPScbQOeho+NNpHFP\/yGN6PmeCCvltjOiuiGyn2XeSkMvSpmGVP+Z4NCQ=="
      }
    },
   "tArg" : ""
  }
}

JSON response:

{
 "OpenMetabaseResult" : 
  {
   "id" : "S1!M"
  }
}

The parameters required for connection are sent as input parameters of the function. The result of the operation is the result of the function.

public static MbId MetabaseConnectWithDigitalSign(string mbDefinitionId, string repoUser, string dbLoginUser)
{
    var somClient = new SomPortTypeClient(); //Proxy object for operation execution
    //Get data block that is signed with digital signature
    var verifierCode = somClient.GetVerifierCode(new GetVerifierCode() { });
    //Open pfx certificate and get signature key from it
    var x509 = new X509Certificate2(@"../../sp.pfx");
    RSACryptoServiceProvider rsa = x509.PrivateKey as RSACryptoServiceProvider;
    //Calculate MD5 hash of previously obtained data and sign this hash with RSA digital signature
    var sign = rsa.SignData(verifierCode.verifierCode, new MD5CryptoServiceProvider());
    //Operation execution parameters
    var tOpen = new OpenMetabase()
    {
        tArg = new OpenMetabaseArg() { },
        tCreds = new UserCreds() //Credentials used for connection
        {
            verifier = new VerifierCodeLogonData()
            {
                //User used for logging in to repository. This user may be absent in DBMS
                user = new UserId() { id = repoUser },
                //User used for connecting to repository database. Password is stored in a protected form in BI server registry
                mbUser = new UserId() { id = dbLoginUser },
                //Previously obtained value used for setting correspondence between digital signature and data block
                cookie = verifierCode.cookie,
                //Digital signature that should be checked by server
                signature = sign,
                //Certificate that will be used to check digital signature. Should be saved in repository database
                certificate = "SPCERT"
            },
            pass = string.Empty
        },
        tDef = new MbDef() //Description of repository, to which connection is established
        {
            id = mbDefinitionId
        }
    };
    //Repository connection
    MbId mb = somClient.OpenMetabase(tOpen);
    return mb;
}