Hey guys,
I have tried numerous methods to get to a solution of this problem but I can't seem to figure it out.
I have an ASP.NET website application(with authentication and authorization working on pages) and within this I have created a folder named "Webservice" and within that a .svc webservice file.
Within a page I am making a request to this webservice with jQuery's $.ajax({}); ( with "crossDomain:true" because it wouldn't work otherwise) and this works well.
However I call also make requests to this webservice using the webbrowser when I type this in the navigation bar: "localhost:{port}/Webservice/ws.svc/rest/{SomeMethod}" EVEN when I'm not logged in to my application.
I want to know if it is possible to deny everyone to execute those webservice methods from the browser, and some additional tips for webservice related security will also be welcome, for example to mimize the risk that someone will hack of crack itself into the webservice us ...
Go to the complete details ...