Authentication between Silverlight and WCF Service WITHOUT ASP.Net Auth

Question

Does anyone know of any best practices or 'standard' techniques for implementing authentication between a silverlight client and WCF services WITHOUT using either RIA Services or ASP.Net authentication & cookies.

My current best option seems to be to add additional message headers to each call and authenticate the user with each call. Any other ideas?

nope, that's the best way to do it. Web service calls are by design state-less and artificially introducing something session-like usually causes more grief than it solves.... — marc_s
– marc_s, Commented Aug 27, 2009 at 13:02

Carlos Figueira · Accepted Answer · 2009-08-27 22:41:10Z

2

You can use the username/credential over HTTPS from SL3: http://msdn.microsoft.com/en-us/library/dd833059(VS.95).aspx

answered Aug 27, 2009 at 22:41

Carlos Figueira

Sign up to request clarification or add additional context in comments.

Comments

REA_ANDREW · Accepted Answer · 2009-08-27 11:54:31Z

1

Authenticating with each call is a good technique for scalable solutions. One method you could look into is, one which many including some amazon web services and the likes of Ebay I think which is HMAC (Hash Message Authentication Code)

Andrew

answered Aug 27, 2009 at 11:54

REA_ANDREW

10.8k8 gold badges51 silver badges74 bronze badges

Comments

Shiraz Bhaiji · Accepted Answer · 2009-08-27 18:10:24Z

0

You need to send information with each call.

You must however make sure that the information cannot be read for example by using SSL.

answered Aug 27, 2009 at 18:10

Shiraz Bhaiji

65.7k37 gold badges149 silver badges260 bronze badges

Collectives™ on Stack Overflow

Authentication between Silverlight and WCF Service WITHOUT ASP.Net Auth

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related