Securing Web Services
There are likely several ways to secure a Web Service. One involves general security of IIS. Another involves user access to the Web Service through authentication. I’ll discuss the latter here. General security will be discussed in Chapter 31, “Securing ASP.NET Applications.”
The typical way one might secure a resource is through a username/password combination. In database applications, for instance, you might store an encrypted form of the user’s password in the database. When the user attempts to log in to the application, the application requests the friendly name of the password, encrypts it, and compares it with what resides in the database. This approach is more secure using a one-way hashing algorithm such as MD5-hashing. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access