Re: use SOAP header for asp.net session state

"InvalidLastName" <spamme@xxxxxxxxxxxxx> wrote in message news:%23waTlTRCHHA.2328@xxxxxxxxxxxxxxxxxxxxxxx
Thank for all your responses.

Some background here. We are creating web services for our customer to get data in and out of the system. The web services can be consumed by any type of applications.

I totally agree the web services should stateless, and currently we actually don't need to maintain state between the calls.

We are planning to create a custom authentication ticket, which will be passed within SOAP header. I am not looking for a solution to use SOAP header to maintain "cookie", I am just want to make sure ASP.NET doesn't support SOAP header based session management, and we won't encounter any compatibility issue in the future if we do need to maintain session state for some odd reasons.

Interesting enough, I believe SQL server 2005 web services is actually using SOAP header to maintain session state. The SQL Server Reporting Services also saves execution ID, which is equivalent to session id, in SOAP header to maintain session state. That's why I really want to make sure SOAP header is not a valid session state management option is ASP.NET 2.0

Other alternative approaches, which provide minimum state management, are very welcome.

The best approach, as has been stated, is "don't do that". Pretend that you've never heard of session state and develop your service that way.

John

Relevant Pages

  • Re: Just tell me why ? so confuse...
    ... offer data analysis to my customer. ... - the Web User Interface layer ... > It is true that web services can sometimes be the wrong technology to ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: Just tell me why ? so confuse...
    ... operations back the UI layer. ... > offer data analysis to my customer. ... >> It is true that web services can sometimes be the wrong technology to ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • <replayDetection> question
    ... this is a repost of a question yesterday. ... security implementation for web services. ... A customer is using WebLogic to ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • <replayDetection> WSE20sp1
    ... this is a repost of a question yesterday. ... security implementation for web services. ... A customer is using WebLogic to ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: Nonce and Created Values. General Questions
    ... > I am using WSE2.0sp1 for my security implementation for web services. ... > customer is using WebLogic to implement their calls to my service. ... > Nonce etc is only recommended. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)