Authentication between Silverlight and WCF WITHOUT ASP.Net Auth

Question

Does anyone know any recommendations or “standard” methods for implementing authentication between the silverlight client and WCF services WITHOUT using RIA services or ASP.Net authentication and cookies.

My best option is to add additional message headers to each call and authenticate the user with each call. Any other ideas?

Answer 1

You can use username / credentials via HTTPS from SL3: http://msdn.microsoft.com/en-us/library/dd833059(VS.95).aspx

Answer 2

. , , - , - amazon Ebay, , , HMAC ( Hash Message)

Answer 3

You need to send information with each call.

However, you must ensure that this information cannot be read, for example, using SSL.