使用身份提供者通过ACS保护WCF. [英] Securing WCF with ACS using identity providers.

查看:143
本文介绍了使用身份提供者通过ACS保护WCF.的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

嗨.
我正在做一个项目,我们在azure平台上托管了一个Web服务.

iPhone客户端正在使用该服务.我们要做的是使用appfabriclabs上的AccessControlService(ACS)保护服务.

是否可以通过使用诸如facebook或google之类的身份提供者凭证从ACS获取令牌?

THX

Hi.
Im working on a project were we host a webservice on the azure platform.

The service is being consumed by a iphone client. What we want to do is secure the service using AccessControlService(ACS) on appfabriclabs.

Is it possible to obtain a token from ACS by using identity provider credentials like facebook or google?

THX

推荐答案

是的,您可以执行此操作,但我认为您不会使用ACS来获取令牌.

我可以肯定地知道,Facebook(和Twitter,还有许多其他)要求您显示其应用程序连接屏幕以收集凭据.您可以自己(在应用程序中)完成此操作,然后将其传递给FB服务,但这与ToS背道而驰.最好的选择是让用户使用规定的方法从设备登录.

此外,使用第三方服务登录(例如FB)意味着您不必担心安全/隐私问题,因为您无需收集/存储用户的凭据.

干杯.
Yes, you can do this, but I don''t think you''ll be using the ACS to obtain the token.

I know for sure that Facebook (and Twitter, many others) requires that you display their app connection screen to gather credentials. You could do it on your own (in-app) and pass that through to the FB service, but it''s against the ToS. Your best bet is to get the user to sign in from the device using the prescribed approach.

Besides, using the 3rd party service to sign in (such as FB) means that you don''t have to worry about security/privacy implications as you''re not collecting/storing the users'' credentials.

Cheers.


你好!

我目前正在尝试通过ACS保护Windows Azure RESTful服务免受第三方身份提供商(即Google和Live)的侵害.我一直在互联网上寻求有关此特定挑战的信息,但没有多大用处.

我非常感谢所有建议,我可能会着手实现这一点.我们的网络服务将主要与iPhone和Andoroid装置通信.

谢谢! :)
Hi there!

I''m presently trying to secure a Windows Azure RESTful service with ACS against 3rd party identity providers, namely Google and Live. I have sought the Internet for information pertaning to this particular challenge, without much avail.

I would highly appreciate all advise that I can possibly get on how to implement this. Our web service will primarily talk to iPhone and Andoroid devises.

Thank you! :)


这篇关于使用身份提供者通过ACS保护WCF.的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!

查看全文
登录 关闭
扫码关注1秒登录
发送“验证码”获取 | 15天全站免登陆