views:

27

answers:

1

So, I swear i'm utterly confused by how to secure WCF Data Services. In that, is there a simplified way of checking to make sure that the client that is sending the data to the WCF Service is authenticated more so, that the client itself is the client I wrote and not some mock client?

Any URL"s that can help me decode this problem?

A: 

Hi Scott,

WCF Data Services uses the normal authN/authZ components of the vanilla WCF stack. How do you host your service (typically in IIS) and what kind of authentication scheme are you using?

Update: The Astoria/WCF Data Services team has an excellent blog post series on WCF Data Services and Authentication: http://blogs.msdn.com/b/astoriateam/archive/tags/authentication/

larsw
I'm looking to use a custom database approach. In that I want the client to hand down a username,password,key to WCF DataServices. I basically want to avoid keeping state and always assume the client asking for the query (CRUD) is lying and validate each time.
Scott Barnes