I am developing some services in WCF that will need to be .net 1.1 compatible. These services will be public on the internet, but should be accessible to authenticated user only.
I am just starting on this, and so far the only solution i see, would be to expose the services as basic http binding, through a SSL channel, and collect authentication information such as username/password in clear text inside of the soap header.
Em I on the right track ? Are there features in WCF i can leverage for this other than manually check for this information in the header.. perhaps i could use the security tokens and than construct them manually from 1.1 ( there is no WSE installed on clients either ).
Persisting session:
I am not yet clear if I will need to authenticate each service method call, or if a token will be created and passed back to the client to be used for duration of the session in similar fashion as asp.net.
any f ...
Go to the complete details ...