Web Services and WS-Security (using WSE)

StPatrick

StPatrick

Perch
Were anyone able to use UsernameToken with web service? I have implemented a custom authentication mechanism similar to shown here:
http://www.codeproject.com/soap/wssecurity_usernametokens.asp. But I end up with exception That assembly does not allow partially trusted callers. Searching the web, I have found that this happens because IIS is not running in Full Trust environment (more info here ). Of course I tried setting full trust to my site and of course I have failed :rolleyes: I understand the reasons why IIS is not running in full trust mode, but the question is - what now? So again.. anyone were able to secure their web service in one way or another and how?

Thanks,
Phil
 
Yep, you can't use WSE here, in fact, you can't use WSE in most of the shared host environment due to medium trust.

I have been experimenting with using SOAP headers to authenticate web services request. Google on it, that should point you to the right direction.
 
You must log in or register to reply here.
Back
Top