I am developing web service for my windows mobile application..! But the new requirement is the web service must be an secure..! for example : My web service name is [URL] Instead of that , client wants to [URL] How I create https web service..! I am using visual studio 2008. windows 7
View 1 RepliesI need advice on how to secure my WCF web service hosted in IIS. I am new to WCF and would appreciate any sample code, articles to help me restrict access to my WCF service.
I am in the process of testing and deploying a WCF service that will be available on the internet. I need to secure the web service so that only authorized clients can use the service. I need to be able to detect who the client is making the call to the service. The group I am building this service for wants to use Certificate authentication or IP address to Identify the themselves to call my web service. They do not want to use user name and password.
I have found several articles and code snippets for getting the IP address of the client and Certificate authentication. The problem I found using trying to get the IP address of the client is that since my web service his hosted behind a F5 or some type of reverse proxy I cannot get the true IP of the client. The IP that the web services get is the IP of the F5 or the reverse proxy.
For Certificate Authentication I followed the directions from the 9 simple steps to enable X.509 certificates on WCF located here
http://www.codeproject.com/KB/WCF/9StepsWCF.aspx?msg=3181718. I had a few problems using this setup for my web service. 1) To me it seemed like as long as the user presented a valid Certificate they would be able to call my web service.
2) Does Certificate Authentication work when the security mode is set to Transport? In my production environment only HTTPS traffic is allowed through. I setup a Certificate authention on my service following the steps outlined in the article. I used the SSL certificate assigned to my server for the web services. For the client outside the network the service is hosted on, I used one of the certificates I generated when i tested the code locally. I changed the authentication mode of the certificate to chain trust for both the client and the server. I was able to call the service and recieve a message. I thought that since my certificate was self generated using the makecert command that the web services would not authenticate the client for the service.
how I can secure my services to only allow a few approved clients to call call the service.
How do you secure a WCF web service when you are using the traditional "connection string in the web.config"?
I have added a WCF service to an application which uses a JQuery post and returns JSON. The request happens on the client side. The purpose of this service is to return search information while the person is typing text into a textbox.
It works well, but there is a problem because the application will be used by a number of people and I am maintaining a role based security within the applications MS SQL database. The connection string to the database is in the web.config file.
In order to run the JQuery call to the web service the user must have at least read access directly to the database. I want to allow the application to control the access, but removing all security to the WCF service opens the application up for external access by unauthorized users.
if i have the web application with many pages like add order page, edit order page, and delete order page actually they also interact with the Sql Server 2008 and i also create web service page call Sales_Service.asmx. i know just i need to put something like query into Web Method in Sales_Service.asmx but i have a lot of queries, i don't know which query i should put into it and how the web page call the Sales_Services.asmx
View 2 RepliesHow to create an instance of web service without adding web service reference? How to identify the server address/name where the web service is hosted from C# code?
View 1 RepliesHow to create simple web service in VS2010 Professional (trial version). There is no template to do this. I am not trying to create WCF service here.
View 2 Repliesi want to create a web service which consists of CRUD operations Create, Retrieve, Update and Delete. creating web methods on insert and update operations.
View 2 RepliesI am new to WCF, I got a requirement like I need to expose a WCF service which will be consuming by clients. The data sent by clients must be passed by the service throughTCP IP port communication (these IP address and Port will be dynamic) to the other end.
View 5 RepliesI've created a Webservice and consumed it in a website application & i hosted the both in IIS, they are working fine. Now i've to create the WCF Service & consume the service in the web application and hosting the both in IIS. I've gone through the basicsof WCF; i found there are some contracts like Service Contract, Operation Contract, etc & also Found Interface1.cs & Service1.svc files, So don't know How to deal with these files.I'l post my webservice code and web app code, Please tell me Where should i do the modifications to convert it to a WCF Service,
[code]...
Is there any way i can create and host a WCF service, and my client apps just send username and passwords to the service to suthenticate them selves, without using Certificates, on client and Server side???
IF NOT:
Then is there any way i can do the above, but just using certificates on server side, i dont want all of my client apps' machines installing the certificate?
I am trying to learn to create a WCf service. My Wcf service is to return result from a Stored Proc.
The WCf Project compiled succesfully. Now I added a website to the same solution to create a web client for my WCF. When I right click my website and try to add web refrence->Web services in this solution, I see Service1, Project MyWCF, URL Service1.svc. When I select Service1, I get this error msg.
Error: The type 'MyWCF.Service1', provided as the Service attribute value in the ServiceHost directive could not be found.
Stack Trace:
[Code]....
i am thinking to create a Web Service to send emails ,this is the first time i am using web service
View 1 Replieswe need to expose a web service to the 3rd party vendor which can only call using POST protocol, NOT SOAP.So my question, is it better to build a web service or just simply .aspx page?Also is there any best practice documentation on this.
View 4 RepliesI am trying to create a web service that can check a location for file and if available get the contents.
Also this web service has to upload the file using ftp after making changes locally.
Any pointers in this direction.
Is it possible to create REST based web service using asmx?
View 1 RepliesI want to create a WCF Service to transfer data to our clients application(WPF). The Data I am trying to send is as follows.
ID Code Description unit Rate
1 104200000 LIVE GOAT NOS 25
2 104200000 LIVE GOAT2 NOS 25
3 104200030 LIVE GOAT3 KGS 10
4 104202030 Water LTR 5
and so on till ~ 11000 records.
What I have done so far is. Created a service which return a list of data.
public List<Classes.TariffData> GetTariffData() { var currentTariffData = new List<Classes.TariffData>(); using (var myConnection = new SqlConnection(ConfigurationManager.ConnectionStrings["ConnectionString"].ConnectionString)) { const string query = "select a.ID,a.Code,a.Description,a.unit,a.rate,a.rate3 from tariff.dbo.tariffdata a, tariff.dbo.code_history b where a.id = b.id and b.endofvalidity is null"; using (var myCommand = new SqlCommand(query, myConnection)) { using (var ad = new SqlDataAdapter(myCommand)) { var dt = new DataTable("tariff"); ad.Fill(dt); currentTariffData.AddRange(from DataRow row in dt.Rows select new Classes.TariffData { Id = int.Parse(row["Id"].ToString()), Code = row["Code"].ToString(), Description = row["Description"].ToString(), Unit = row["unit"].ToString(), Rate = row["rate"].ToString(), Rate3 = row["rate3"].ToString() }); return currentTariffData; } } } }
Class is as follows
public class TariffData { public int Id { get; set; } public string Code { get; set; } public string Description { get; set; } public string Unit { get; set; } public string Rate { get; set; } public string Rate3 { get; set; } }
If i Limit the number of data by using const string query = "select top 300 a.ID,a.Code,a.Description. The Service works fine. But if I remove the top 300 part I get an error. What is your advice if I want a service to allow our client applications to update their data by using WCF. (11000 records.) I am using visual Studio 2010. C# .Net 4.0
I followed an example on how to create a simple web service that converts celsius to fahrenheit. It seems to work alright. After the conversion it outputs the new value in xml. What do you do with the value that's in xml? Do you use an Xmlreader to read it from the xml, or what is usually done after the value is generated in xml?
View 6 RepliesMy web service works fine on my local machine but when i put it on the server it throw this error:
Parser Error Message: Could not create type 'Service'.
I don't know how to fix this.
I have a WSDL, and I need to write this web service. (I am not the client, I am the provider of this service) Is there any tool and/or best approch to create this Web Service?
View 1 RepliesHow to make web services secure in asp.net both the asmx and on WCF. Currently we have web services and now are in process of converting them to WCF in some modules in our application. Now as upgradation is in process we like to incorporate security on the web services as we intend to open some of them to all our clients via web (they contain both asmx and WCF as well).
View 1 RepliesI have to create web service from which i do want to call SSIS package
View 2 RepliesWhen a web service is consumed from server side, the web service may be implemented in a way to check credentials of the caller. In the case of calling the web service from javascript, how to secure the service since no credentials can be passed into a javascript function becuase of the visibility in source view?
View 7 RepliesI have a webservice that's behind form's authentication. The site that hosts the service also serves as a site that requires a user to log in via the login page.I have a second site that needs to be able to access the service that the first site hosts. However, when attempting to access the service, it fails because the service requires that the user is logged in.
View 1 RepliesIn my web site i'm using Asp.net web service (using javascript) to update certain values to DB. I'm concered about the security threats. How can i secure ASP.net Ajax web service using javascript
View 6 RepliesI have a web service that is set as secure via the web config:
<authentication mode="Windows" />
<authorization>
<allow roles="METWeb-Admin"/>
<deny users="*"/>
<allow users="METJoeUser;METJoeSmith"/>
</authorization>
And also in IIS 7 (Windows Server 2008) it has the following set for Authentication:
Anonymous Authentication:Disabled
ASP.NET Impersonation: Disabled
Basic Authentication Disabled
Forms Authentication: Disabled
Windows Authentication: Enabled
The anonymous site I am calling it from in IIS7 is:
Anonymous Authentication:Enabled
ASP.NET Impersonation: Disabled
Basic Authentication Disabled
Forms Authentication: Enabled
Windows Authentication: Disabled
In the Anonymous web site, I call the secure web service via:
moms.momService myMom = new moms.momService();
NetworkCredential netCred = new NetworkCredential(@"username", "password");
strStatus = myMom.createBackupDirectoryAndPrivs(sData);
Everytime I run this, it returns as Unauthorized. I have made sure this user is in the Web-Admin AD Group. I also tried adding the user as an Allow User but still unauthorized. I am pretty sure the problem lies somewhere in IIS but not sure what else to check.
BTW: For what it's worth, if I run the Anonymous site via VS2010 development on my dev box, and call the secure site using above code, it works fine. This is why I am thinking IIS on the PROD server.