WCF数据服务身份验证（但没有WINDOWS身份验证） [英] WCF Data Service Authentication (BUT NO WINDOWS AUTHENTICATION)

问题描述

有没有办法使用用户和通行证或证书来保护WCF数据服务？我对Windows身份验证不感兴趣，因为它非常不安全，假设我的客户端在Linux上运行，所以它将完全没用。我也不能使用cookies。

Is there any way to secure a WCF Data Service using User and Pass or Certificate? I am not interested in windows authentication as it is very insecure and let's say my client is running on Linux so it will be totally useless. I also CAN'T use cookies.

推荐答案

当然你可以使用基于服务本身注册的用户/密码的身份验证，以及用户证书。



请从这里开始： https://msdn.microsoft.com/en-us/library/ff405740.aspx [ ^ ]。

-SA

Of course you can use authentication based on user/password registered in the service itself, as well as user certificates.

Please start here: https://msdn.microsoft.com/en-us/library/ff405740.aspx[^].

—SA

是的，你肯定想要远离Windows身份验证，它是如此不安全......我可以告诉你这是一个* nix人的知识:)你应该使用用户名和密码，这样更多安全。



http://www.felinesoft.com/blog/index.ph p / 2014/02 / secured-a-wcf-service-with-username-and-password-using-message-security-and-the-channel-pattern- [ ^ ]

Yeah, you definitely want to stay clear of Windows Authentication, it's so insecure...with knowledge like that I can tell you're a *nix man :) You should use usernames and passwords instead, that's way more secure.

http://www.felinesoft.com/blog/index.php/2014/02/securing-a-wcf-service-with-username-and-password-using-message-security-and-the-channel-factory-pattern/[^]

这篇关于WCF数据服务身份验证（但没有WINDOWS身份验证）的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！