What authentication to pick for the cross-platform WCF service?

What type of authentication would you suggest for the service that is:

  • implemented as WCF and exposed via varios enpoints (including XML-RPC)
  • has to be consumed easily by various cross-platform clients


Options that I'm aware of are:

  • Forms-based authentication for IIS-hosted WCF (easy to implement, but has horrible cross-platform support, plus it is not REST)
  • Sending plain-text username/pwd with every call (easy to use on any platform, but totally unsecure)
  • Using ticket-based authentication, when username&pwd are used to create a ticket that is valid for some time and is passed with every request (can be consumed by any client easily, but the API model is bound to this type of security)

Thanks for your time!


Since you mention REST, i assume over HTTP, you could look at HTTP Digest Authentication.

However, keep in mind that XML-RPC is not RESTful. If you are going the way of WS/RPC, you might want to look at WS-Security.

In the end I've picked the simplest approach: Web services are implemented as simple stateless SOAP services, where username and password get passed with every request.

Product page

Need Your Help

Javascript Event Between onFocus and onChange

javascript javascript-events

I'm working a web page where I'd like to run some Javascript code when a user alters text in a given input field, but I can't figure out which event to trap (assuming one exists) that would give me...

Link styles not working on all links, only some

html css html5 css3 styles

http://pastebin.com/mYk8M038 here is what I have so far... I think it may be something to do with the div's... BUT that doesn't explain why my Email me link hover effect is working but the links to