Add SecureString password support

SimpleImpersonation/Impersonation.cs

@@ -1,5 +1,6 @@
 using System;
 using System.Runtime.InteropServices;
+using System.Security;
 using System.Security.Permissions;
 using System.Security.Principal;
 
@@ -8,28 +9,59 @@ namespace SimpleImpersonation
     [PermissionSet(SecurityAction.Demand, Name = "FullTrust")]
     public sealed class Impersonation : IDisposable
     {
-        private readonly SafeTokenHandle _handle;
-        private readonly WindowsImpersonationContext _context;
+        private SafeTokenHandle _handle;
+        private WindowsImpersonationContext _context;
 
         public static Impersonation LogonUser(string domain, string username, string password, LogonType logonType)
         {
             return new Impersonation(domain, username, password, logonType);
         }
 
-        private Impersonation(string domain, string username, string password, LogonType logonType)
+        public static Impersonation LogonUser(string domain, string username, SecureString password, LogonType logonType)
+        {
+            return new Impersonation(domain, username, password, logonType);
+        }
+
+        private void CompleteImpersonation(bool ok, IntPtr handle)
         {
-            IntPtr handle;
-            var ok = NativeMethods.LogonUser(username, domain, password, (int)logonType, 0, out handle);
             if (!ok)
             {
                 var errorCode = Marshal.GetLastWin32Error();
+
+                if (handle != IntPtr.Zero)
+                   NativeMethods.CloseHandle(handle);
+
                 throw new ApplicationException(string.Format("Could not impersonate the elevated user.  LogonUser returned error code {0}.", errorCode));
             }
 
             _handle = new SafeTokenHandle(handle);
             _context = WindowsIdentity.Impersonate(_handle.DangerousGetHandle());
         }
 
+        private Impersonation(string domain, string username, SecureString password, LogonType logonType)
+        {
+            IntPtr handle;
+            var passPtr = Marshal.SecureStringToGlobalAllocUnicode(password);
+            bool ok;
+            try
+            {
+                ok = NativeMethods.LogonUser(username, domain, passPtr, (int)logonType, 0, out handle);
+            }
+            finally
+            {
+                Marshal.ZeroFreeGlobalAllocUnicode(passPtr);
+            }
+
+            CompleteImpersonation(ok, handle);
+        }
+
+        private Impersonation(string domain, string username, string password, LogonType logonType)
+        {
+            IntPtr handle;
+            var ok = NativeMethods.LogonUser(username, domain, password, (int)logonType, 0, out handle);
+            CompleteImpersonation(ok, handle);
+        }
+
         public void Dispose()
         {
             _context.Dispose();

SimpleImpersonation/NativeMethods.cs

@@ -10,6 +10,9 @@ internal class NativeMethods
         [DllImport("advapi32.dll", SetLastError = true, CharSet = CharSet.Unicode)]
         internal static extern bool LogonUser(String lpszUsername, String lpszDomain, String lpszPassword, int dwLogonType, int dwLogonProvider, out IntPtr phToken);
 
+        [DllImport("advapi32.dll", SetLastError = true, CharSet = CharSet.Unicode)]
+        internal static extern bool LogonUser(String lpszUsername, String lpszDomain, IntPtr phPassword, int dwLogonType, int dwLogonProvider, out IntPtr phToken);
+
         [DllImport("kernel32.dll")]
         [ReliabilityContract(Consistency.WillNotCorruptState, Cer.Success)]
         [SuppressUnmanagedCodeSecurity]

SimpleImpersonation/Properties/AssemblyInfo.cs

@@ -5,8 +5,8 @@
 [assembly: AssemblyDescription("A tiny library that lets you impersonate any user, by acting as a managed wrapper for the LogonUser Win32 function.")]
 [assembly: AssemblyCompany("Matt Johnson")]
 [assembly: AssemblyProduct("Simple Impersonation")]
-[assembly: AssemblyCopyright("Copyright © 2013, Matt Johnson")]
+[assembly: AssemblyCopyright("Copyright © 2015, Matt Johnson")]
 [assembly: ComVisible(false)]
-[assembly: AssemblyVersion("1.0.1")]
-[assembly: AssemblyFileVersion("1.0.1.2")]
-[assembly: AssemblyInformationalVersion("1.0.1")]
+[assembly: AssemblyVersion("1.2.0")]
+[assembly: AssemblyFileVersion("1.2.0.0")]
+[assembly: AssemblyInformationalVersion("1.2.0")]