There is a legacy website that uses forms authentation and it employs an HTTPModule to add role authorization. The site primarily displays data from a database on webpages. The data displayed depends on the user's role. I've been asked to add some webservices to the site that allow access to some of the data, again restricted by the user's role. The legacy user's still need a form displayed to logon but the webservices user's don't -- althought they still need to use forms authentication (send a username and password which is authenticated in the database and then roles are added).
Is this possible? Or do I have to have two websites - the legacy one using forms authentication specified in the web.config like:
<authentication mode="Forms">
<forms name="siteCookie" loginUrl="Default.aspx" protection="All" timeout="45" path=& ...
Go to the complete details ...