Implementing a custom CheckAccessCore in ServiceAuthorizationManager

Discussion in 'ASP.NET WebServices' started by Martin, Dec 6, 2013.

  1. Has anyone successfully done this to enable service level authentication using Basic Authorization

    This on DA's W2008?

    My custom code is jut not being reached and I can't see what is wrong with my web.config

    Many thanks
     
  2. FrankC

    FrankC DiscountASP.NET Staff

    have not tested it but it should work.

    Do you get any error?

    What does your web.config look like?
     
  3. Got a bit side-tracked last week!

    relevant bit of web.config is - I have also set Trust=Full as I understand that is required:


    <system.serviceModel>
    <services>
    <service behaviorConfiguration="OrchardApp.Service1Behavior"
    name="OrchardApp.OrchardApp" >

    <endpoint address="" bindingConfiguration="webHttpBinding" binding="webHttpBinding" contract="OrchardApp.OrchardAppSVC" behaviorConfiguration="JsonBehavior" >
    </endpoint>
    </service>
    </services>
    <bindings>
    <webHttpBinding>
    <binding maxBufferSize="10485760" maxReceivedMessageSize="10485760" maxBufferPoolSize="10485760"
    openTimeout="00:25:00" closeTimeout="00:25:00" sendTimeout="00:25:00" receiveTimeout="00:25:00" name="webHttpBinding">
    <readerQuotas maxDepth="32" maxStringContentLength="10485760" maxNameTableCharCount="10485760"
    maxArrayLength="10485760" maxBytesPerRead="10485760" />

    <security mode="Transport">

    </security>
    </binding>
    </webHttpBinding>
    </bindings>
    <behaviors>
    <endpointBehaviors>
    <behavior name="JsonBehavior">
    <webHttp/>
    </behavior>
    </endpointBehaviors>
    <serviceBehaviors>
    <behavior name="OrchardApp.Service1Behavior">
    <!-- To avoid disclosing metadata information, set the value below to false before deployment -->
    <serviceMetadata httpGetEnabled="false" httpsGetEnabled="true"/>
    <!-- To receive exception details in faults for debugging purposes, set the value below to true. Set to false before deployment to avoid disclosing exception information -->
    <serviceDebug includeExceptionDetailInFaults="true"/>

    <serviceAuthorization serviceAuthorizationManagerType="OrchardApp.RestfulAuthentication, OrchardApp" />

    </behavior>
    </serviceBehaviors>
    </behaviors>
    <serviceHostingEnvironment aspNetCompatibilityEnabled="true">
    <baseAddressPrefixFilters>
    <add prefix=https://orchardapp.xxxx.xx/> Real web address here
    </baseAddressPrefixFilters>
    </serviceHostingEnvironment>
    </system.serviceModel>
     

Share This Page