在WCF Ria服务中，是否可以其他连接到我的服务？ 如果是，我如何禁止它

Question

Is it possible for others to connect to my defined services in my Ria application?

If yes, how can we remove this access?

Answer 1

A very broad question! First of all, you cannot remove access, eg your URL will still be there and anyone pounding around might accidentally hit it - you can restrict access to your service by checking some claims / facts about the caller.

Since a WCF RIA Service is fundamentally a WCF service, you can use any of the WCF mechanisms to secure your service (warning: I'm not familiar with Silverlight, so not all of these might be available / feasible for the limited world of Silverlight clients....):

• require the user to be a valid Windows identity (in Intranet scenarios)
• require a certificate with the caller
• require a specific header in each message
• check the caller's IP

One fairly straightforward solution is being presented here:

Restricting Access to your WCF Service to a known Silverlight Client

But again - that's just one possible solution out of a vast number of possibilities.