Re: Web Service and ASP.NET Forms Authentication

Hi Dominick,

Again, thank you for your reply :-)

Ok, so FormsAuth is out, the same is WSE because it is not supported on the
Compact Framework. All my users are custom users and not Windows accounts,
so that leaves me with implementing my own basic auth module. Do you have
any examples of how to do that?

I guess that is supported on all three platforms?

Thanks
henrik.

"Dominick Baier [DevelopMentor]" <dbaier@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
wrote in message news:4580be63199f8f8c83144fc7b09d5@xxxxxxxxxxxxxxxxxxxxx
Hi Henrik,
FormsAuth relies on cookies - this is very unnatural for web services -
you would have to create a login method, the client needs a cookie
container (bit of a problem for asp.net) etc...

Well - you could use WSE3 username tokens with SSL or basic authentication
with SSL (which are both very similar)

basic auth would be against windows accounts only unless you implement
your own basic auth module that authenticates against a custom user store.
WSE3 has the concept of UsernameTokenManagers where you can implement
custom authentication but has to be installed on every client

HTH

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Hi,

Is it possible to use ASP.NET Forms Authentication in Web Services?
or should I use WSE 3.0 UserNameTokens?

I have to call the web service from a Web App, a Windows App and a
SmartPhone app.

Thanks

Henrik Skak Pedersen





.

Relevant Pages

  • Re: Web Service and ASP.NET Forms Authentication
    ... I just got a link in a reply from the Compact Framework forum, ... so that leaves me with implementing my own basic auth module. ... custom authentication but has to be installed on every client ... Is it possible to use ASP.NET Forms Authentication in Web Services? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Trying to determine best strategy for web service security
    ... I would check out the Hands On Labs for WSE 2.0. ... > I have a group of web services which provide a facade for a COM+ ... The only clients of the web services will be ASP.NET ... > What I would like to have is an authentication web service that would ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: WSE 2.0, smart client, Username authentication, no x.509
    ... I also prefer SCTs over UserTokens for authentication, ... > I dont know if WSE 2.0 SP 3 allows this I think it is only with the new ... > web services WSE 3.0 hosts them without a web server for you (read the WSE ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Trying to determine best strategy for web service security
    ... I am new to WSE 2.0 and a little overwhelmed by the breadth of what's ... I have a group of web services which provide a facade for a COM+ ... What I would like to have is an authentication web service that would ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Web Service and ASP.NET Forms Authentication
    ... he is creating a custom SOAP header containing a user name and a password. ... I personally would go for basic auth over SSL with a custom basic auth ... custom authentication but has to be installed on every client ... Is it possible to use ASP.NET Forms Authentication in Web Services? ...
    (microsoft.public.dotnet.framework.aspnet.security)