How to authenticate WCF calls using forms authentication and secutity

Posted by Fixer on Stack Overflow See other posts from Stack Overflow or by Fixer
Published on 2011-01-10T07:14:52Z Indexed on 2011/01/10 7:53 UTC
Read the original article Hit count: 366

Filed under:

wcf

|

security

|

wcf-security

I'm planning a set up for a distributed application that spans serveral machines and will use WCF to send data in between.

Machine A

Front end website http://www.site.com
Password protected site using Forms Authentication

Machine B

WCF Application Service
http://service1.site.com/DoSomething.svc

Machine C

WCF Application Service
http://service2.site.com/DoSomething.svc

The WCF services on Machine B and Machine C should check that the request from Machine A has been authenticated. How can i check that the request is authenticated across the different machines?

I only care that the request is authenticated and not concerned about securing the message body (because we are not sending any sensitive data across the wire), so SSL is not required.

What authentication methods can i use for the above scenario?

© Stack Overflow or respective owner

Related posts about wcf

Calling a WCF service from another WCF service

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi ! I have a WCF service hosted on a windows service on my Server1. It also has IIS on this machine. I call the service from a web app and it works fine. But within this service, I have to call another WCF sevice (also hosted on a windows service) located on Server2. The security credentials are… >>> More
wcf + Byte array through wcf service using MTOM

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, How to pass Byte array through wcf service using MTOM..please give me any sample >>> More
WCF 4.0 new enhancements over WCF 3.5

as seen on Stack Overflow - Search for 'Stack Overflow'
What are the new enhancements in WCF 4.0 and how easy would it be to upgrade existing WCF services to 4.0? >>> More
Reuse classes and objects for both WCF and non-WCF

as seen on Stack Overflow - Search for 'Stack Overflow'
I have several classes such as Order, Customer, etc. These classes serve for holding data and nothing more. I want to be able to reuse these classes in other projects in the future, but for some reason I don't quite understand, WCF forces me to decorate the data members with the [DataMember] attribute… >>> More
Summarizing client side asynchronous invocations in WCF/WCF Silverlight

as seen on Code Project - Search for 'Code Project'
Summarizing client side asynchronous invocations in WCF/WCF Silverlight. Introducing ServiceClient class. >>> More

Related posts about security

sudo apt-get update errors

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
Here is what I get on my terminal when running sudo apt-get update errors. I dont know if the issue is from my sources.list or my proxy setup(have not made any changes to proxies). Thank you for any help in advanced. Ign http://security.ubuntu.com oneiric-security Release.gpg Ign http://security… >>> More
The Security-Developer Gap: Why IT Security Can't Fix Your Security Problems Alone

as seen on Devx - Search for 'Devx'
Two well-known white hats explain how hackers take advantage of security holes left by enterprise application developers. >>> More
The Security-Developer Gap: Why IT Security Can't Fix Your Security Problems Alone

as seen on Internet.com - Search for 'Internet.com'
Two well-known white hats explain how hackers take advantage of security holes left by enterprise application developers. >>> More
StackOverFlowError while creating Mac object on AS400/Java

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello all, I am a newbie to AS400-Java programming. I am trying to create my first program to test the implementation of Message Authentication Code (MAC). I am trying to use the HMACSHA1 hash function. My (Java 1.4) program runs fine on a dev box (V5R4).But fails terribly on the QA box (V5R3). My… >>> More
Google App Engine - Spring Security Issue (java.security.AccessControlException)

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm currently getting the AccessControlException below when I deploy to app engine (I don't see it when I run in my local environment). I'm using GAE 1.3.1, Spring 3.0.1, and Spring Security 3.0.2. Any ideas how to get around this issue? It appears to be an issue with Spring Security trying to get… >>> More