WCF & oAuth

Question

User-221752185 posted

Hi, does anyone have an example of using oAuth with WCF? NOTE: I am not using WCF REST. I am using SOAP or JSON. I would like to pass the oAuth string in the Message Header "Authorization". Have an example of a non-restful WCF with oAuth?

Answer 1

User-1662538993 posted

Check this link -

http://www.cleancode.co.nz/blog/523/oauth-dot-net

http://fszlin.dymetis.com/post/2011/05/20/Protecting-WCF-Data-Services-using-OAuth.aspx

http://programmers.stackexchange.com/questions/145326/rest-service-authentication-authorization

Answer 2

User-221752185 posted

Thanks so much, this was a great help. May I ask...

1) Do you have any pointers on how to generate the actual AccessToken? People say random bytes then base64 encode it.

2) Doesn't the AccessToken need to be unique across the entire database? I would imagine when authenticating the AccessToken you would be retreiving the token by the token itself in the SQL query. Or would you retrieve the token by the username and therefore, the tokens don't have to be unique across the whole datastore? If that is true... I don't see the username being passed in the authorization. Its just the token.

If you could please read carefully and try to address all my questions. I would greatly appreciate it. Thanks so much.