I need to protect my WCF web services and was thinking what is the best way of doing this. Its not really a ROLE / User situation – more of a “WHO CAN CALL THE WEB SERVICE”.
I was thinking that i could use an IP? Is this the recommended way?
Anybody have any experience with this, I was thinking of have a table (sql) with all IPs that can access the web service but i didn’t want to reinvent the wheel if something exists already.
I presume there is an event or similar when somebody access the webservice so i can check there ip? – Anybody have an example?
And i presume this can be accomplished with standard HTTP binding ?
I would appreciate any input anybody has
You can pretty easily restrict the calling IP’s in your service using a service behavior.
There’s an excellent CodeProject article including source code that shows how to do this. Since it’s WCF and a WCF behavior, it’s pluggable, too – you can add or remove it from your service as needed.
Marc