context: //
  // SecurityBindingElement.cs
  //
  // Author:
  //	Atsushi Enomoto <atsushi@ximian.com>
  //
  // Copyright (C) 2005-2006 Novell, Inc.  http://www.novell.com
  //
  // Permission is hereby granted, free of charge, to any person obtaining
  // a copy of this software and associated documentation files (the
  // "Software"), to deal in the Software without restriction, including
  // without limitation the rights to use, copy, modify, merge, publish,
  // distribute, sublicense, and/or sell copies of the Software, and to
  // permit persons to whom the Software is furnished to do so, subject to
  // the following conditions:
  // 
  // The above copyright notice and this permission notice shall be
  // included in all copies or substantial portions of the Software.
  // 
  // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  // EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  // MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  // NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
  // LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
  // OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
  // WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
  //
  using System.Collections.Generic;
  using System.Collections.ObjectModel;
  using System.ServiceModel.Description;
  using System.ServiceModel.Channels;
  using System.ServiceModel.Security;
  #if !NET_2_1 && !XAMMAC_4_5
  using System.ServiceModel.Channels.Security;
  using System.IdentityModel.Selectors;
  using System.IdentityModel.Tokens;
  using System.ServiceModel.Security.Tokens;
  #endif
  using System.Text;
  
  namespace System.ServiceModel.Channels
  {
  	public abstract class SecurityBindingElement : BindingElement
  	{
  		internal SecurityBindingElement ()
  		{
  #if !NET_2_1 && !XAMMAC_4_5
  			DefaultAlgorithmSuite = SecurityAlgorithmSuite.Default;
  			MessageSecurityVersion = MessageSecurityVersion.Default;
  			KeyEntropyMode = SecurityKeyEntropyMode.CombinedEntropy;
  			endpoint = new SupportingTokenParameters ();
  			operation = new Dictionary<string,SupportingTokenParameters> ();
  			opt_endpoint = new SupportingTokenParameters ();
  			opt_operation = new Dictionary<string,SupportingTokenParameters> ();
  			service_settings = new LocalServiceSecuritySettings ();
  #endif
  			IncludeTimestamp = true;
  			LocalClientSettings = new LocalClientSecuritySettings ();
  		}
  
  		internal SecurityBindingElement (SecurityBindingElement other)
  		{
  #if !NET_2_1 && !XAMMAC_4_5
  			alg_suite = other.alg_suite;
  			key_entropy_mode = other.key_entropy_mode;
  			security_header_layout = other.security_header_layout;
  			msg_security_version = other.msg_security_version;
  			endpoint = other.endpoint.Clone ();
  			opt_endpoint = other.opt_endpoint.Clone ();
  			operation = new Dictionary<string,SupportingTokenParameters> ();
  			foreach (KeyValuePair<string,SupportingTokenParameters> p in other.operation)
  				operation.Add (p.Key, p.Value.Clone ());
  			opt_operation = new Dictionary<string,SupportingTokenParameters> ();
  			foreach (KeyValuePair<string,SupportingTokenParameters> p in other.opt_operation)
  				opt_operation.Add (p.Key, p.Value.Clone ());
  			service_settings = other.service_settings.Clone ();
  #endif
  			IncludeTimestamp = other.IncludeTimestamp;
  			LocalClientSettings = other.LocalClientSettings.Clone ();
  		}
  
  #if !NET_2_1 && !XAMMAC_4_5
  		SecurityAlgorithmSuite alg_suite;
  		SecurityKeyEntropyMode key_entropy_mode;
  		SecurityHeaderLayout security_header_layout;
  		MessageSecurityVersion msg_security_version;
  		SupportingTokenParameters endpoint, opt_endpoint;
  		IDictionary<string,SupportingTokenParameters> operation, opt_operation;
  		LocalServiceSecuritySettings service_settings;
  #endif
  
  		public bool IncludeTimestamp { get; set; }
  
  		public LocalClientSecuritySettings LocalClientSettings { get; private set; }
  
  #if !NET_2_1 && !XAMMAC_4_5
  		public SecurityAlgorithmSuite DefaultAlgorithmSuite {
  			get { return alg_suite; }
  			set { alg_suite = value; }
  		}
  
  		public SecurityKeyEntropyMode KeyEntropyMode {
  			get { return key_entropy_mode; }
  			set { key_entropy_mode = value; }
  		}
  
  		public LocalServiceSecuritySettings LocalServiceSettings {
  			get { return service_settings; }
  		}
  
  		public SecurityHeaderLayout SecurityHeaderLayout {
  			get { return security_header_layout; }
  			set { security_header_layout = value; }
  		}
  
  		public MessageSecurityVersion MessageSecurityVersion {
  			get { return msg_security_version; }
  			set { msg_security_version = value; }
  		}
  
  		public SupportingTokenParameters EndpointSupportingTokenParameters {
  			get { return endpoint; }
  		}
  
  		public IDictionary<string,SupportingTokenParameters> OperationSupportingTokenParameters {
  			get { return operation; }
  		}
  
  		public SupportingTokenParameters OptionalEndpointSupportingTokenParameters {
  			get { return opt_endpoint; }
  		}
  
  		public IDictionary<string,SupportingTokenParameters> OptionalOperationSupportingTokenParameters {
  			get { return opt_operation; }
  		}
  #endif
  
  		[MonoTODO ("Implement for TransportSecurityBindingElement")]
  		public override bool CanBuildChannelFactory<TChannel> (BindingContext context)
  		{
  #if NET_2_1 || XAMMAC_4_5
  			// not sure this should be like this, but there isn't Symmetric/Asymmetric elements in 2.1 anyways.
  			return context.CanBuildInnerChannelFactory<TChannel> ();
  #else
  			if (this is TransportSecurityBindingElement)
  				throw new NotImplementedException ();
  
  			var symm = this as SymmetricSecurityBindingElement;
  			var asymm = this as AsymmetricSecurityBindingElement;
  			var pt = symm != null ? symm.ProtectionTokenParameters : asymm != null ? asymm.InitiatorTokenParameters : null;
  			if (pt == null)
  				return false;
  
  			var t = typeof (TChannel);
  			var req = new InitiatorServiceModelSecurityTokenRequirement ();
  			pt.InitializeSecurityTokenRequirement (req);
  			object dummy;
  			if (req.Properties.TryGetValue (ServiceModelSecurityTokenRequirement.IssuedSecurityTokenParametersProperty, out dummy) && dummy != null) {
  				if (t == typeof (IRequestSessionChannel))
  					return context.CanBuildInnerChannelFactory<IRequestChannel> () ||
  						context.CanBuildInnerChannelFactory<IRequestSessionChannel> ();
  				else if (t == typeof (IDuplexSessionChannel))
  					return context.CanBuildInnerChannelFactory<IDuplexChannel> () ||
  						context.CanBuildInnerChannelFactory<IDuplexSessionChannel> ();
  			} else {
  				if (t == typeof (IRequestChannel))
  					return context.CanBuildInnerChannelFactory<IRequestChannel> () ||
  						context.CanBuildInnerChannelFactory<IRequestSessionChannel> ();
  				else if (t == typeof (IDuplexChannel))
  					return context.CanBuildInnerChannelFactory<IDuplexChannel> () ||
  						context.CanBuildInnerChannelFactory<IDuplexSessionChannel> ();
  			}
  			return false;
  #endif
  		}
  
  		public override IChannelFactory<TChannel> BuildChannelFactory<TChannel> (
  			BindingContext context)
  		{
  			return BuildChannelFactoryCore<TChannel> (context);
  		}
  
  		protected abstract IChannelFactory<TChannel>
  			BuildChannelFactoryCore<TChannel> (BindingContext context);
  
  #if !NET_2_1 && !XAMMAC_4_5
  		[MonoTODO ("Implement for TransportSecurityBindingElement")]
  		public override bool CanBuildChannelListener<TChannel> (BindingContext context)
  		{
  			if (this is TransportSecurityBindingElement)
  				throw new NotImplementedException ();
  
  			var symm = this as SymmetricSecurityBindingElement;
  			var asymm = this as AsymmetricSecurityBindingElement;
  			var pt = symm != null ? symm.ProtectionTokenParameters : asymm != null ? asymm.RecipientTokenParameters : null;
  			if (pt == null)
  				return false;
  
  			var t = typeof (TChannel);
  			var req = new InitiatorServiceModelSecurityTokenRequirement ();
  			pt.InitializeSecurityTokenRequirement (req);
  			object dummy;
  			if (req.Properties.TryGetValue (ServiceModelSecurityTokenRequirement.IssuedSecurityTokenParametersProperty, out dummy) && dummy != null) {
  				if (t == typeof (IReplySessionChannel))
  
gt: 					return context.CanBuildInnerChannelListener<IReplyChannel> () ||