Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

What is the protection method of service metadata in WCF security

2025-01-29 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Development >

Share

Shulou(Shulou.com)06/02 Report--

This article mainly explains "what is the service metadata protection method in WCF security". The explanation content in this article is simple and clear, easy to learn and understand. Please follow the idea of Xiaobian and study and learn "what is the service metadata protection method in WCF security" together.

WCF Security Overview

Windows Communication Foundation (WCF) is a unified programming model provided by Microsoft for building service-oriented applications. WCF security issues are particularly important in distributed environments. If you feel that using WCF default security measures can make you rest assured, then you can go home tomorrow and farm. Of course, for learning, it is enough ~, but we are talking about real project applications. WCF security provisions and guarantees under various protocols are different.

background

One day, manager Chen said to programmer Xiao Li: Xiao Li, our company outsourced to a project, but the customer asked for distributed deployment, and now the project is nearing the end, because we use WCF, so there is a little problem in deployment, our service seems to be accessible to everyone, why is this?

WCF Security Issue Presentation

Xiao Li *** thing is to check the service configuration file, really do not know, a look shocked, the original development of WCF, using the default configuration, all automatically generated code, without any changes, the thought of the project will be delivered in this posture, Xiao Li really pinched a sweat.

Code

the solution

Delete metadata exchange endpoint information

2. Reset http protocol to obtain metadata: false

3. Generally, we will configure metadata to be discovered during development, but remember, before publishing your service, you must delete it. At present, the service has been protected to a certain extent.

4. The final configuration is as follows

Thank you for reading, the above is "WCF security service metadata protection method is what" the content, after learning this article, I believe we have a deeper understanding of WCF security service metadata protection method is what this problem, the specific use of the need for everyone to practice verification. Here is, Xiaobian will push more articles related to knowledge points for everyone, welcome to pay attention!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 274

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Development

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report