Restricting webservice..

[Ann]

Hi all,
My prj has a login form(Login.aspx ).It uses Form authentication( Credential
stored in web.config).Onc e user is authenticated,i t redirects to a
webservice(serv ice.asmx)
that has a method that does some database operation.

this is the code..

if (FormsAuthentic ation.Authentic ate(UsrNameText Box.Text, PwdTextBox.Text ))
Response.Redire ct("Service.asm x");
else
FormsAuthentica tion.RedirectTo LoginPage();
My problem is,when the user types the asmx url directly in the
browser(localho st/service.asmx... ) ,it should prompt for authentication and
if its not a valid user,i need to redirect him to login page

any suggestion,on how to do this???

Thnks

[Nicholas Paldino [.NET/C# MVP]]

Ann,

The way that ASP.NET handles authentication for web sites is completely
different from how authentication/authorization is handled on web services.
If anything, you should be using WSE (Web Services Enhancements) or Windows
Communications Foundation to handle your security needs.

Also, if these classes are in the same web app, then why are you
redirecting to the web service? Why not just call the class directly?

Hope this helps.
--
- Nicholas Paldino [.NET/C# MVP]
- mv*@spam.guard. caspershouse.co m

"Ann" <An*@discussion s.microsoft.com wrote in message
news:FC******** *************** ***********@mic rosoft.com...

Hi all,
My prj has a login form(Login.aspx ).It uses Form authentication( Credential
stored in web.config).Onc e user is authenticated,i t redirects to a
webservice(serv ice.asmx)
that has a method that does some database operation.

this is the code..

if (FormsAuthentic ation.Authentic ate(UsrNameText Box.Text,
PwdTextBox.Text ))
Response.Redire ct("Service.asm x");
else
FormsAuthentica tion.RedirectTo LoginPage();
My problem is,when the user types the asmx url directly in the
browser(localho st/service.asmx... ) ,it should prompt for authentication
and
if its not a valid user,i need to redirect him to login page

any suggestion,on how to do this???

Thnks