Dear all,
I have some questions about web service authentication/security for a web application that I have.
The current web application structure :
-asp.net website with aspx pages and an web service on the same root.
-jquery ajax call to a web service method.
-on the root NT security is used, credentials prompted to user on browsing, and a user verification with the database to log in on the web application.
I would like to secure the web service part so that only request coming from url x (here the root) has access to the web service, at a later stage I will move the web service to a dedicated web site and there I think I will use SOAP authentication as extra.
The only question that remains is how to do this when I perform an ajax call to the web service?
...
Go to the complete details ...