Monday, September 6, 2010

Better Username token for WCF

@YaronNaveh

Gerwin Postma had commented on my ClearUsernameBinding post with an interesting link. It seems aszego had published a username token class for WCF which has improved capabilities comparing to the built-in one (in terms of interoperability). Some of the great features are support for digest password and nonce:

<UsernameToken>
...
<Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest">S5Of09Zuan02wWpbSEx7EDZsefE=</Password>

<Nonce>Ka+AC6oq5ROJ/pHX1sW+Ng==</Nonce>

</UsernameToken>

This is a great library for many people struggling with ws-security interoperability, although username issues are relatively easy to workaround by writing custom inspectors.

@YaronNaveh

What's next? get this blog rss updates or register for mail updates!

0 comments: