asp.net mvc authentication when call from client app

Question

I use asp.net mvc controller instead of Web Service in my project.

When I call the controller from my client app,there will be a authentication problem. If I use Web Service ,I can use SOAP Header , but now in asp.net mvc, There is no soap header.

Please help.

I am really know a little about the web security.

score 0 · Answer 1 · answered May 22 '12 at 05:40

0

You have several options.

Use a request header to contain some security token.
Include security tokens in the message that you send in the request body.
If your application uses something like Forms Authentication, you can ask consumers to call a login action, then grab the Forms Auth cookie and include that cookie in subsequent calls.

answered May 22 '12 at 05:40

moribvndvs

42,191
11
135
149

Thanks ,I think I will use option 1. – nicholapei May 22 '12 at 05:56

score 0 · Accepted Answer · edited May 23 '17 at 12:04

0

Normal way of doing this when you come to http services is to pass it in authorization header in following format (if you are doing request from fiddler)

Authorization: Basic user123:pass123

user123:pass123 string is normally base64 encoded and you have to decode it on server side, check it against user store and authenticate the user. One example can be found here

edited May 23 '17 at 12:04

Community

1
1

answered May 22 '12 at 05:44

Muhammad Adeel Zahid

17,474
14
90
155

also look at http://stackoverflow.com/questions/1606991/asp-net-mvc-http-authentication-prompt/1607546#1607546 – Muhammad Adeel Zahid May 22 '12 at 05:48

score 0 · Answer 3 · answered May 22 '12 at 05:44

Since you are not using soap. You may use a simple http way. Which means you start a HttpRequest and handle result via HttpResponse. Thus you have to simulate a authenticate action as signing in from web browser.

You need to get the security token or cookie from the reponse. And put them into your following request. Thus your controller will recognize the request's identity.

asp.net mvc authentication when call from client app

3 Answers3