Home/ Questions/Q 250973
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T21:33:21+00:00

Is there a clean way to expose a WCF REST service that requires basic

  • 0

Is there a clean way to expose a WCF REST service that requires basic authentication, but where we handle the actual validation of the username/password ourselves? It seems that when you tell WCF in config that you want to use basic authentication, it forces you to turn on basic authentication in IIS and IIS can only do basic authentication against window accounts.

The only hack we have found is to lie to WCF and tell it there is no security on the service and then do authentication outside of the WCF stack using a generic IHttpModule (which has a proprietary config file to indicate which URLs have which authentication/authorization requirements).

It seems like there should be a better way. Anyone have one?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    The WCF REST Contrib library enables this functionality:

    http://github.com/mikeobrien/WcfRestContrib

    It also allows you to secure individual operations.

    • 0