Good day!
I have a secured web-hosted WCF service, based on wsHttpBinding. I need allow access to the service by custom username and password. Also, I need to keep session alive during client communication. Data should be secured as well. What do I use?
Web.config
...
<security mode="Message">
<message clientCredentialType="UserName"/>
</security>
...
<serviceCredentials>
<userNameAuthentication userNamePasswordValidationMode="Custom" customUserNamePasswordValidatorType="MyService.Service+CustomUserNameValidator, MyService"/>
<serviceCertificate findValue="www.mywebsite.com" storeLocation="LocalMachine" storeName="My" x509FindType="FindBySubjectName"/>
</serviceCredentials>
The main problem is x509 certificate. For the local debug purpose I made self-signed ...
Go to the complete details ...