Question

I am using wcf services for interaction between my javascript files and server side.

I am concerened about security around this as anyone can call these services via an application, firebug etc.

So I want to secure my web services to only be accessible from specified sources, for example the javascript files on my site – ie. the main function why I have wcf services.

I am running on the .net 3.5 framework in a c# web application.

Could anyone assist my securing my wcf services as outlined above?

Answer 1

If this is a combination of javascript and server side , you can probably generate a Key from the server side and store it in the javascript variable and pass again to the WCF webservices.