用于访问SQL Server的UWP服务

Question

RE: https://code.msdn.microsoft.com/How-to-access-data-from-5f2602ec

I'm hoping to clarify some points and concerns. When designing UWP for Windows 10 Microsoft, in my own thoughts, short-sightedly left SYSTEM.DATA out of the framework. This means that you must use a WCF web service as a middle man to access any data from SQL Server and return it to your application. Here's where I get confused:

1. When the app is run from Visual Studio and then stopped, the web service is still running in the background and can be accessed from any browser. You could easily find the address by using something like fiddler.

   This concerns me for because anyone can then see your service and use it and I'm not sure how to obfuscate the service itself.

2. I'm also not sure how the service itself gets bundled and deployed. When creating the service reference, you reference a specific address and port. Does it always use that same port no matter where it's installed? Does the store app automatically deploy the web service as part of the UWP download/install?

Overall, I'm skeptical of the decision they made to exclude system.data and the ability to protect IP or secure your application when you can simply browse to the service address and review the function calls, profile, or decompile.

I hope I've been clear on my concerns and that some kind soul can entertain them.

Answer 1

A service is a separate application that you typically deploy to some remote machine, for example in the cloud.

Your UWP client app connects to this service over the Internet but the service is not packaged and deployed together with your client application. It may serve several different kind of client applications simultaneously.

The client application obviously needs to know the address of the service to be able to connect to it at runtime.

So you basically create two different applications. One service application that reads from and writes to the database and one UWP client application that consumes the remote service application. The service application may be deployed to Azure and the UWP application to the Windows Store.