Re: Base WebService Page and Event?

Hi lucius,

So the question here is also related to your another thread "internal
webservice", right?

If you want to your custom authentication and want to put it in a central
place without affecting your main webservice's webmethod codelogic, I think
using SoapExtension is a good choice here. ASP.NET webservice will go
through a series of Soap Extensions (like a pipeline) when the SOAP message
come from network to the ASP.NET webservice engine. You can inject your
custom soap extensions into the pipeline chain and so some
customization(such as logging, message modification, authentication....).

Also, you can attach authentication info in webservice's SOAP header, and
check the Soap header for security authentcation info in SoapExtension:

#Digging into SOAP Headers with the .NET Framework
http://msdn2.microsoft.com/En-US/library/aa480503.aspx

The following articles have well demonstrate the use of SOAP Extensions:

#SOAP Message Modification Using SOAP Extensions
http://msdn2.microsoft.com/en-us/library/esw638yk.aspx

#Using SOAP Extensions in ASP.NET
http://msdn.microsoft.com/msdnmag/issues/04/03/ASPColumn/

#Extend the ASP.NET WebMethod Framework with Business Rules Validation
http://msdn.microsoft.com/msdnmag/issues/03/08/businessrules/default.aspx

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead



==================================================

Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.



Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.

==================================================


This posting is provided "AS IS" with no warranties, and confers no rights.






.

Relevant Pages

  • Re: * * * C# Application and Database Security Model * * *
    ... I've noticded that your main concern here is to provide security ... If you're going to do authentication and authorization against windows ... authenticate user against custom security account database and authroize ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.languages.csharp)
  • RE: Membership Provider Woes
    ... perform forms authentication in your ASP.NET web application. ... you also want to add additional custom datainto the ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Authentication problem
    ... I have taken your suggestion and copied the code from our authentication ... Have you add any custom component like custom ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Custom login will not work
    ... For forms authentication, you do can use the global.asax or a custom ... And for the authorization on page url, ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: How to secure webservice
    ... using authentication so that the caller would have to send over credentials ... soap extensions to include in the soap headers some authentication info like ... http://www.planetsourcecode.com "Leo" wrote in message ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
Loading