具有动态用户名和密码的WCF自定义身份验证

Question

I implemented a WCF service using custom authentication, it works fine when i pass a constant string of username and password into UsernameAuthentication class, Validate method and validate it there. But is there a way i can pass Dynamic Username, password and validate them. How can i implement this and access those values in this class.

class UsernameAuthentication : UserNamePasswordValidator
    {        
        public override void Validate(string userName, string password)
        {            
            var ok = (userName == "DynamicUserName") && (password == "DynamicPassWord");
            if (ok == false)
                throw new AuthenticationException("u/p does not match");
        }
    }

Answer 1

Inside the Validate method you will have to query your own user database and check if the username and password are valid. Usually you will use an RDBMS or an XML file where all user-data are stored.

Have a look at ASP.NET's Membership for an example of a database schema that supports role-based security. Even better, you could integrate ASP.NET's Membership with WCF. Hva a look at the "Control Access to and Usage of Public Web-Hosted Services" of this article . You could also read the chapter on security in Essential WCF by Resnick, Crane and Bowen where they describe many ways to support authentication/authorization in WCF services.