WCF public web service security using username, password
- From: AardvarkHunter <AardvarkHunter@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 28 Jul 2009 08:30:02 -0700
Hi,
What's the easiest way to secure a public-facing WCF web service? It seems
like the client should be able to create a proxy through the WSDL and call
this but mine's not working. I'm tweaking the bindings in my config and
trying to implement a BasicAuthenticationModule in the httpModules section of
the config like I've seen in some online samples, but nothing is working.
Service1Client sc = new Service1Client();
sc.ChannelFactory.Credentials.UserName.UserName = "name";
sc.ChannelFactory.Credentials.UserName.Password = "pwd";
string data = sc.GetData(1);
MessageBox.Show(data);
My WCF web service will then need to read these values and authenticate
against a custom datastore.
In production the Webservice will be over https, but testing on my pc won't
be (if that matters). If testing needs to be https to make things simpler I
believe I can spoof a secure layer.
The facts:
I'm using dotnet 3.5. Volume on the WS will be low. I have a few cases
where the parameters coming into the ws need to very secure, but the data
going out is not as confidential, so I don't the highest level of security
available.
Thanks in advance,
Greg
.
- Prev by Date: Re: web camera
- Next by Date: Exception
- Previous by thread: web camera
- Next by thread: Exception
- Index(es):
Relevant Pages
|
