Software Engineering, Project Management, and Effectiveness
Today we released our patterns & practices Improving Web Service security: Scenarios and Implementation Guidance for WCF on MSDN. Using end-to-end application scenarios, this guide shows you how to design and implement authentication and authorization in WCF. You'll learn how to improve the security of your WCF services through prescriptive guidance including guidelines, a Q&A, practices at a glance, and step-by-step how to articles. The guide is the result of a collaborative effort between patterns & practices, WCF team members, and industry experts.
Key Scenarios Here's the key scenarios:
Contents at a Glance
Chapters
Our Team
Contributors / Reviewers
PingBack from http://blog.cwa.me.uk/2009/02/11/the-morning-brew-284/
Thank you for submitting this cool story - Trackback from DotNetShoutout
在2月11日，J.D.Meier在其博客上宣布Patterns
在2月11日，J.D. Meier在其博客上宣布Patterns
Composite Application Guidance for WPF and Silverlight v2.0 (PRISM) is now available. What is PRISM The
Read your blogs. Have to question about end to end Message security (custom username authentication using wshttpbinding).
Consider this scenario:
I have WCFService1 that receives the username and password from the windows client.
Now i need to Call WCFService2 from the WCFService1. Also, i have to pass the username, password received.
The issue i have is i'm not able to access the password in WCFService1 (received in Custom UsernamePasswordValidator) so that i can pass it to WCFService2 from my business logic. (i call the WCFService2 based on some business logic)
The UsernameToken profile does in fact allow this using the SendPlainText option - take a look at this excellent post http://blogs.msdn.com/thehoggblog/articles/504526.aspx for a complete discussion of UNT's.
I think (but haven't tried it) that you can set the authentication mode to UserNameOverTransport which will provide the desired effect... Let me know if this works for you.
Guia de Segurança em WCF do patterns & practices O guia de segurança em WCF demonstra como desenhar
a {color : #0033CC;} a:link {color: #0033CC;} a:visited.local {color: #0033CC;} a:visited {color : #800080;}