Secure it?
How is everyone securing their per-user access to the web service and managing a server-side session for that user?
i.e. assuming encryption is handled by SSL -- how do you set the user session context on the web server? By http authentication, or actually passing a username/password pair into a 'logon' operation on the web-service and a token afterwards? the userid/pw pair every operation call?
Any examples appreciated.
Last edited by nwhiteside; 04-30-2009 at 12:52 PM.
|
