在会话.NET中存储纯文本密码

Question

I'm working on a .net application that uses wsdl to connect to another service (the service is SpiraTest). I need to call authentication method in every request. The problem is that the service only provides a method to authenticate with a username and a plain-text password.

What would be a good way to save the username and plain password? I'm considering putting them in a session if I don't better options?

Users log in with the credentials to use the app and I use the same credentials to contact the remote service. User log on only once, but every time they navigate through pages that need data from remote service, I need to authenticate using the credentials that user gave when logging in.

Answer 1

Session consume more memory in server side and it is not good solution for your Task. What I suugest that Form authentication in asp.net. It create a cookie based on the credentials you have passed for authentication and it will be kept on browser until you log off from your App http://www.codeproject.com/Articles/13872/Form-authentication-and-authorization-in-ASP-NET I hope it may solve your problem

Answer 2

I'm not familiar with ASP.NET sessions, but I'm assuming they're similar to PHP sessions. In that case, the actual session data is kept in a file on the server . If you're just trying to keep your users from seeing this password, I think that keeping them in the session would be sufficient.

However, you haven't told us exactly how this username and password come to exist and are used. If you have just one username / password that your application uses to make requests to the web service, there is no point in keeping them in the session at all - simply store them in a global config.