Loading

How to secure webservice ?

How to secure webservice ?

Vasu Gadhiya

Vasu Gadhiya

8y873.NET

i have developed webservice using webmethod

[WebMethod]
public string HelloWorld()
{
return "Hello World";
}
public UserDetails User;
[WebMethod]
[SoapHeader("User", Required = true)]
public string SayHello(string userName)
{
if (User != null)
{
if (User.IsValid())
return string.Format("Hello...{0} ☺ ", userName);
else
return "Error in authentication";
}
else
{
return "Error in authentication";
}
}

All working Fine

but issue is when i run from desktop app its data (request and response) shown in web debugging software Like Fiddler.

even SOAP header is Shown.

(see attached screenshot)

How can i secure this Type of web Service (web method)

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Nanddeep Nachan8y ago
Web method can be secured from an unauthenticated client request

Embed the SOAP header into message and validate it's contents on the server.

If the SOAP header validates successfully then the web server sends the web service response to the client application.

Please refer these examples

Simple Web Service Authentication

https://www.asp.net/web-forms/videos/authentication/simple-web-service-authentication

Web Service in ASP.Net (Security by SOAP Authentication)

http://www.c-sharpcorner.com/uploadfile/8ef97c/web-service-in-asp-net-security-by-soap-authentication-pa/

HTTP Security and ASP.NET Web Services

https://msdn.microsoft.com/en-us/library/ms996415.aspx