Pattern for verifying authenticity of a request to WCF service

Posted by fung on Stack Overflow See other posts from Stack Overflow or by fung
Published on 2010-05-31T03:14:34Z Indexed on 2010/05/31 3:22 UTC
Read the original article Hit count: 490

Filed under:

wcf

|

authentication

|

wcf-security

I have a client app that makes calls to a WCF service. This app is on a public computer that's easily accessible and anyone can easily copy the .EXE and .CONFIG of my app into another machine and start using it.

Is there a pattern where I can check if the request is coming only from an app on a computer I installed it on and not on one it has been copied to?

Thanks in advance.

© Stack Overflow or respective owner

Related posts about wcf

Calling a WCF service from another WCF service

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi ! I have a WCF service hosted on a windows service on my Server1. It also has IIS on this machine. I call the service from a web app and it works fine. But within this service, I have to call another WCF sevice (also hosted on a windows service) located on Server2. The security credentials are… >>> More
wcf + Byte array through wcf service using MTOM

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, How to pass Byte array through wcf service using MTOM..please give me any sample >>> More
WCF 4.0 new enhancements over WCF 3.5

as seen on Stack Overflow - Search for 'Stack Overflow'
What are the new enhancements in WCF 4.0 and how easy would it be to upgrade existing WCF services to 4.0? >>> More
Reuse classes and objects for both WCF and non-WCF

as seen on Stack Overflow - Search for 'Stack Overflow'
I have several classes such as Order, Customer, etc. These classes serve for holding data and nothing more. I want to be able to reuse these classes in other projects in the future, but for some reason I don't quite understand, WCF forces me to decorate the data members with the [DataMember] attribute… >>> More
Summarizing client side asynchronous invocations in WCF/WCF Silverlight

as seen on Code Project - Search for 'Code Project'
Summarizing client side asynchronous invocations in WCF/WCF Silverlight. Introducing ServiceClient class. >>> More

Related posts about authentication

Configuring Fed Authentication Methods in OIF / IdP

as seen on Oracle Blogs - Search for 'Oracle Blogs'
In this article, I will provide examples on how to configure OIF/IdP to map OAM Authentication Schemes to Federation Authentication Methods, based on the concepts introduced in my previous entry. I will show examples for the three protocols supported by OIF: SAML 2.0 SSO SAML… >>> More
windows authentication vs sql server authentication for asp.net forms authentication site

as seen on Stack Overflow - Search for 'Stack Overflow'
I have a database and a site having forms authentication. It is working fine with VS2008. This time, I am using "Trusted_connection =True". But when it is opened from outside or directly from browser then I am getting error "Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'." I know this is due… >>> More
Disable authentication on subfolder(s) of an ASP.NET app using windows authentication

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, Is it possible to disable windows authentication on one or more subfolders of an ASP.net application using windows authentication? >>> More
AutoCompleteExtender - authentication failure (forms authentication)

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm using the AutoCompleteExtender from the AJAX control toolkit on my aspx page - I have it wired up to a WCF service that is returning a string array and everything works happily. If I change my service definition to include a demand for the caller to be authenticated, like so: <OperationContract()… >>> More
Ruby on Rails , functionalities having twitter authentication and email authentication (autlogic and

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi Experts, I would like to ask your guidance on how to authenticate using email add/ the basic log-in while having also a twitter log-in, twitter authentication works fine but if having an alternative log-in like using basic sign-up and email log-in part wont work.... any ideas please...? >>> More