如何授权WCF服务

Question

我有一个执行一些操作，做任何事情之前，它向用户授权为目的的REST Web服务调用它一个方法，检查

if(System.Web.HttpContext.Current.Session["UserId"] != null) 
{ 
    string userId = System.Web.HttpContext.Current.Session["UserId"].ToString(); 
} 
else 
{ 
    throw exception; 
} 

我打电话这项服务在我的asp.net web应用程序像下面

HttpWebRequest req = (System.Net.HttpWebRequest)System.Net.WebRequest.Create(uri); 
     req.Method = "POST"; 
     req.ServicePoint.Expect100Continue = false; 
     req.ContentLength = 0; 
     req.ContentType = "application/x-www-form-urlencoded"; 

     if (!string.IsNullOrEmpty(body)) 
     { 
      req.ContentLength = body.Length; 
      ASCIIEncoding encoding = new ASCIIEncoding(); 
      byte[] data = encoding.GetBytes(body); 
      Stream newStream = req.GetRequestStream(); 
      newStream.Write(data, 0, data.Length); 
      newStream.Close(); 
     } 

     HttpWebResponse resp; 
     try 
     { 
      resp = (HttpWebResponse)req.GetResponse(); 
      System.IO.StreamReader sr = new System.IO.StreamReader(resp.GetResponseStream()); 
      return sr.ReadToEnd().Trim(); 
     } 
     catch (WebException ex) 
     { 
      resp = (HttpWebResponse)ex.Response; 

      //pass on the exception 
      throw ex; 
     } 
    } 

如何传递的用户id .....

我的服务，我的web应用程序都是在同一个解决方案，但在不同的亲ject和userId的值来自基于登录应用程序的用户的数据库。

Answer 1

OpenAuth是一个很好的途径。

退房http://www.codeproject.com/Tips/372422/Secure-WCF-RESTful-service-using-OAUTH

Answer 2

像这样

byte[] postBytes = Encoding.UTF8.GetBytes(userId); 
       req.ContentType = "application/x-www-form-urlencoded"; 
       req.ContentLength = postBytes.Length;   

using(data = req.GetRequestStream()) { 
       data.Write(postBytes, 0, postBytes.Length); 
       data.Close(); 
      }