StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POI was able to pass username and password to webservice, but its not the way i need to secure from unauthorized user
text
Body
copied!<p>This is another question I have about web services and securing them. I made a WCF Web Service and this is the code that I used...</p> <pre><code> [OperationContract] [WebInvoke(Method = "GET")] string myData(string name, string pass); </code></pre> <p>and this is the code that I use to interact with the web service...</p> <pre><code> public string myData(string a, string b) { if (a == "chris" && b == "pass") return "You did it"; else return "Nope"; } </code></pre> <p>I know this looks basic and I understand that I can add more functionality to it, but I don't think this is the way I need. It looks a little dirty to me.</p> <p>If have a web service sitting on a server and if someone tries to use the service, I would like a pop up to ask for a username and password, so I can verify that they are in the database and they can proceed invoking the web service.</p> <p>For this to be done, should I set up authentication in IIS to do this? I think I'm over thinking things. My client just wants me to be able to secure the web service from unauthorized users. So That's what I am running into an issue with, I'm not sure the correct way to secure everything from unauthorized access, should (and how) this be done in IIS or just use the code that I provided.</p> <p>I apologize if this kind of question has been asked a million times but the question is always different and so are the answers.</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload