[Mono-list] Secure WCF web service under mono

[Atsushi Eno]

 From my quick search, it seems a typical ASP.NET role provider scenario
is to use ServiceAuthorizationBehavior. We don't support it.
I'm not sure how it is involved in the entire WCF security stack, but
at least I can say, if it requires secure messaging, then it won't
come soon. WCF security stack is huge and we only have incomplete
work from years ago.

Atsushi Eno


Piotr Walat wrote:
> Hello,
> Is it possible to set up a secure web service using current (trunk) mono wcf
> implementation? By a secure web service i mean a web service that supports
> any authorization and authentication scenario that doesnt require to much
> hacking (on server or proxy side)?. If i'd like to use asp.net
> membership/role provider to authenticate users is it possible?
> 
> To implement SOA architecture in my mono apps i currently am using a
> combination of ASP.NET MVC, JSON.NET, SSL (transport level encryption),
> basic HTTP authentication + ASP.NET postgresql membership provider. This
> stack works well, but requires some effort to set up and doesnt provide a
> way to generate proxies automatically (they need to be written manually). I
> am looking for an alternative that would provide an easy way of generating
> proxies also on Microsoft .NET implementation (silverlight or WPF apps for
> example). Will mono-wcf ever provide that?
>