AzureWebsites 上的 SignalR CryptographicException

Question

我在使用 SignalR 时遇到了这个异常，部署在 Azure 网站中。它在调试环境中运行良好。它是 SignalR 1.0.1，我使用 .NET MVC 和 WebApi

The data protection operation was unsuccessful. This may have been caused by not having the user profile loaded for the current thread's user context, which may be the case when the thread is impersonating.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. 

Exception Details: System.Security.Cryptography.CryptographicException: The data protection operation was unsuccessful. This may have been caused by not having the user profile loaded for the current thread's user context, which may be the case when the thread is impersonating.

Source Error: 

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace: 
[CryptographicException: The data protection operation was unsuccessful. This may have     been caused by not having the user profile loaded for the current thread's user context, which may be the case when the thread is impersonating.]
Microsoft.Owin.Host.SystemWeb.<>c__DisplayClass1.<GetRethrowWithNoStackLossDelegate>b__0(Exception ex) +27
Microsoft.Owin.Host.SystemWeb.Utils.RethrowWithOriginalStack(Exception ex) +15
Microsoft.Owin.Host.SystemWeb.CallContextAsyncResult.End(IAsyncResult result) +47
Microsoft.Owin.Host.SystemWeb.OwinHttpHandler.EndProcessRequest(IAsyncResult result) +7
System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +9629708
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +155

你有什么想法吗？ 谢谢

Answer 1

我不相信 Azure 网站能够与证书/加密 API 进行通信。尝试调用 Azure 管理 API 时会出现类似问题。运行站点的用户上下文似乎没有足够的权限来执行此操作。

Answer 2

这是允许我使用以下代码解决相同问题的单个帖子。 dfowlers 提到注册 IProtectedData 的实例，这让我搜索并找到了定义 here。

请注意，使用 Visual Studio 开发服务器时未遇到此问题，但在上线时未遇到此问题。我很高兴我找到了这篇文章，因为我不知道我应该如何知道要实现 IProtectedData。也许文档中有更深的内容。

我不确定这是否是 100% 正确的解决方案，但这对我有用。我创建了一个实现 IProtectedData 的类，然后用 Ninject 注册了它。

类：

using Microsoft.AspNet.SignalR.Infrastructure;

namespace Fwr.DataTeamUploader.Logic
{
    public class ProtectedData : IProtectedData
    {

        // Obviously this isn't doing much to protect the data,
        // assume custom encryption required here

        // To reiterate, no encryption is VERY^4 BAD, see comments.

        public string Protect(string data, string purpose)
        {
            return data;
        }

        public string Unprotect(string protectedValue, string purpose)
        {
            return protectedValue;
        }
    }
}

Ninject 注册：

/// <summary>
/// Load your modules or register your services here
/// </summary>
/// <param name="kernel">The kernel.</param>
private static void RegisterServices(IKernel kernel)
{
    ...

    kernel.Bind<IProtectedData>().To<ProtectedData>();

    ...

Answer 3

现在在这种情况下，您现在可以使用来自Microsoft.AspNet.SignalR.SystemWeb 包的扩展方法MapsHubs()。

MachineKeyProtectedData 将被使用，而不是默认实现。

Answer 4

对于访问此页面的其他人，我遇到了同样的问题，但解决方案要简单得多。正如上面的 cmets 所述，接受的答案很糟糕。还提到的是，SignalR 默认使用MachineKeyDataProtector 代替IProtectedData。 MapHubs 和 MapConnection 都调用一个函数 InitializeProtectedData，该函数将 MachineKeyDataProtector 注册到依赖解析器。

我的问题是我正在映射我的 SignalR 路由，然后配置依赖解析器

RouteTable.Routes.MapConnection<SomeEndpoint>("SomeEndpoint", "SomeEndpointUrl");
GlobalHost.DependencyResolver = 
                     new StructureMapDependencyResolver(ObjectFactory.Container);

所以基本上由 MapConnection 完成的 IProtectedData 解析器注册 -> 当我注册我的自定义解析器时，InitializeProtectedData 被吹走了。简单的修复，在映射连接之前设置解析器。

GlobalHost.DependencyResolver = 
                     new StructureMapDependencyResolver(ObjectFactory.Container);
RouteTable.Routes.MapConnection<SomeEndpoint>("SomeEndpoint", "SomeEndpointUrl");