私人用户的Web服务，而非公共用户. [英] Web service for private users not for public.

问题描述

我们有网站，但它不是公开的，我们向用户提供了数字证书，这些人只能访问该网站.
我想要的Web服务也一样.我也不想将此服务提供给公众，我只希望特定用途以及如何实现这一目的.
我是否可以通过任何证书来实现这一目标?

We are having web sites but it is not to public and we have digial certificate to users and those people only can access the site.
The same i wanted for web service. This service also i dont want to give to public and i wanted to give to only specific uses and how can i achieve this.
Whether i can achieve this thro any certificate ?

推荐答案

作为起点，您可以禁用WSDL发布吗?有了这个功能，只有已经生成代理的客户端才可以发现和使用Web服务.当然，该服务仍将是公共的，并且任何知道如何正确格式化SOAP请求的人都可以对其进行调用.第二步将包括引入安全性(私钥，HTTPS，客户端证书等)，以便只有受信任的客户端才能使用该服务.

As a starting point could you disable the WSDL publication? With that in place only clients that already have generated a proxy will be able to discover and use the web service. Of course the service would still be public and anyone who knows how to properly format a SOAP request would be able to call it. A second step would consist in introducing security (private keys, HTTPS, client certificates, etc...) so that only trusted clients could consume the service.

这篇关于私人用户的Web服务，而非公共用户.的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！