Click here to Skip to main content
15,075,525 members
Please Sign up or sign in to vote.
1.00/5 (1 vote)
See more:
Is there any way to secure a WCF Data Service using User and Pass or Certificate? I am not interested in windows authentication as it is very insecure and let's say my client is running on Linux so it will be totally useless. I also CAN'T use cookies.
Posted

Of course you can use authentication based on user/password registered in the service itself, as well as user certificates.

Please start here: https://msdn.microsoft.com/en-us/library/ff405740.aspx[^].

—SA
   
Yeah, you definitely want to stay clear of Windows Authentication, it's so insecure...with knowledge like that I can tell you're a *nix man :) You should use usernames and passwords instead, that's way more secure.

http://www.felinesoft.com/blog/index.php/2014/02/securing-a-wcf-service-with-username-and-password-using-message-security-and-the-channel-factory-pattern/[^]
   

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)




CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900