.NET MAUI Android使用BasicHttpBinding Basic认证失败求助

我有一个WCF服务，需要通过Windows控制台应用、.NET MAUI iOS和.NET MAUI Android多平台访问，采用BasicHttpBinding并传递凭据。目前遇到的问题：

• 设置ClientCredentialType = None时，所有平台都能正常连接，但无法传递凭据，满足不了根据用户组权限展示不同行为的需求
• 设置ClientCredentialType = Basic时，Windows和MAUI iOS能正常工作，但MAUI Android会报错：

  System.ServiceModel.Security.MessageSecurityException: 'The HTTP request is unauthorized with client authentication scheme 'Basic'. The authentication header received from the server was 'Basic realm=""'.'
  

服务端当前可用但不接受凭据的配置：

Dim binding As New BasicHttpBinding
binding.Security.Mode = BasicHttpSecurityMode.TransportCredentialOnly
binding.Security.Transport.ClientCredentialType = HttpClientCredentialType.None
selfHost.AddServiceEndpoint(GetType(IWCF), binding, "WCFService")

期望使用的配置（仅Windows和iOS可用）：

Dim binding As New BasicHttpBinding
binding.Security.Mode = BasicHttpSecurityMode.TransportCredentialOnly
binding.Security.Transport.ClientCredentialType = HttpClientCredentialType.Basic
selfHost.AddServiceEndpoint(GetType(IWCF), binding, "WCFService")

MAUI客户端用dotnet-svcutil生成的服务引用（Basic模式）：

private static System.ServiceModel.Channels.Binding GetBindingForEndpoint(EndpointConfiguration endpointConfiguration)
{
        System.ServiceModel.BasicHttpBinding result = new System.ServiceModel.BasicHttpBinding();
        result.MaxBufferSize = int.MaxValue;
        result.ReaderQuotas = System.Xml.XmlDictionaryReaderQuotas.Max;
        result.MaxReceivedMessageSize = int.MaxValue;
        result.AllowCookies = true; 
        result.Security.Mode = System.ServiceModel.BasicHttpSecurityMode.TransportCredentialOnly;
        result.Security.Transport.ClientCredentialType = System.ServiceModel.HttpClientCredentialType.Basic;
        return result;
}

客户端调用时需启用的凭据代码（None模式需注释）：

client.ClientCredentials.UserName.UserName = "[username]";
client.ClientCredentials.UserName.Password = "[Password]";

方案1：手动添加Basic认证Header绕开WCF客户端默认处理 #

Android上WCF的Basic认证处理存在兼容性问题，直接手动构造Authorization Header：

// 创建客户端实例后、调用服务前添加以下代码
var client = new YourWcfClient();
var credential = Convert.ToBase64String(Encoding.ASCII.GetBytes($"{username}:{password}"));
client.Endpoint.Behaviors.Add(new BasicAuthHeaderBehavior(credential));

// 自定义行为类
public class BasicAuthHeaderBehavior : IEndpointBehavior
{
    private readonly string _authHeader;

    public BasicAuthHeaderBehavior(string authHeader)
    {
        _authHeader = authHeader;
    }

    public void AddBindingParameters(ServiceEndpoint endpoint, BindingParameterCollection bindingParameters) { }

    public void ApplyClientBehavior(ServiceEndpoint endpoint, ClientRuntime clientRuntime)
    {
        clientRuntime.MessageInspectors.Add(new BasicAuthHeaderInspector(_authHeader));
    }

    public void ApplyDispatchBehavior(ServiceEndpoint endpoint, EndpointDispatcher endpointDispatcher) { }

    public void Validate(ServiceEndpoint endpoint) { }
}

public class BasicAuthHeaderInspector : IClientMessageInspector
{
    private readonly string _authHeader;

    public BasicAuthHeaderInspector(string authHeader)
    {
        _authHeader = authHeader;
    }

    public object BeforeSendRequest(ref Message request, IClientChannel channel)
    {
        var httpRequest = (HttpRequestMessageProperty)request.Properties[HttpRequestMessageProperty.Name];
        httpRequest.Headers["Authorization"] = $"Basic {_authHeader}";
        return null;
    }

    public void AfterReceiveReply(ref Message reply, object correlationState) { }
}

注意：服务端保持ClientCredentialType = Basic配置不变，客户端注释掉client.ClientCredentials.UserName的设置，改用上面的手动Header方式。

方案2：检查Android网络安全配置 #

Android 9及以上版本默认禁止明文HTTP请求，如果你的WCF服务用的是HTTP而非HTTPS，需要配置允许明文访问：

1. 在Resources/xml目录下创建network_security_config.xml：

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <domain-config cleartextTrafficPermitted="true">
        <domain includeSubdomains="true">你的WCF服务域名/IP</domain>
    </domain-config>
</network-security-config>

2. 在AndroidManifest.xml的<application>标签中添加：

android:networkSecurityConfig="@xml/network_security_config"

提示：生产环境建议改用HTTPS，此配置仅用于调试或过渡场景

方案3：切换到Windows Authentication（环境允许时） #

如果WCF服务部署在Windows服务器，且客户端处于同一域环境，可以改用Windows认证，兼容性更好：

服务端配置 #

Dim binding As New BasicHttpBinding
binding.Security.Mode = BasicHttpSecurityMode.TransportCredentialOnly
binding.Security.Transport.ClientCredentialType = HttpClientCredentialType.Windows
selfHost.AddServiceEndpoint(GetType(IWCF), binding, "WCFService")

客户端配置 #

System.ServiceModel.BasicHttpBinding result = new System.ServiceModel.BasicHttpBinding();
// 保留其他绑定配置
result.Security.Mode = System.ServiceModel.BasicHttpSecurityMode.TransportCredentialOnly;
result.Security.Transport.ClientCredentialType = System.ServiceModel.HttpClientCredentialType.Windows;
// 设置凭据
client.ClientCredentials.Windows.ClientCredential = new System.Net.NetworkCredential(username, password, domain);

方案4：升级WCF客户端依赖包 #

确保MAUI项目中引用的System.ServiceModel.*包是最新稳定版，旧版本可能存在Android平台的Basic认证bug：
在项目文件中更新包版本：

<PackageReference Include="System.ServiceModel.Duplex" Version="4.10.*" />
<PackageReference Include="System.ServiceModel.Http" Version="4.10.*" />
<PackageReference Include="System.ServiceModel.NetTcp" Version="4.10.*" />
<PackageReference Include="System.ServiceModel.Security" Version="4.10.*" />

1. 先试方案2，排除明文HTTP的限制问题
2. 若无效，尝试方案1手动添加Header，这是最直接的绕开方式
3. 环境允许的话，方案3的Windows认证是更可靠的长期解决方案

内容的提问来源于stack exchange，提问作者DAN_F