Web Service - Add Web Reference

surendraparashar · June 4th, 2010, 12:14 AM

Dear All,

I have created a web service in a web application, in this web application form authentication is implemented. When we try to add web reference of this web service in this web application by putting URL of web service in visual studio's add webreference interface, then it redirects to login page for authentication, by putting valid username & password for authentication then redirect to web service url and below following screen shows

-------------------------------------------------------------------------------------------------------------------------------
ImageVerificationService

The following operations are supported. For a formal definition, please review the Service Description.

-------------------------------------------------------------------------------------------------------------------------------

and in right hand side of window following error occurs

------------------------------------------------------------------------------------------------------------------------------
Web Services found at this URL

There was an error downloading 'http://localhost:1761/poc.netNew/POCWebServices/ImageVerificationService.asmx'.
The request failed with the error message:
--
<html><head><title>Object moved</title></head><body>
<h2>Object moved to <a href="/poc.netNew/Login/Login.aspx?ReturnUrl=%2fpoc.netNew%2fPOCWebService s%2fImageVerificationService.asmx">here</a>.</h2>
------------------------------------------------------------------------------------------------------------------------------

Please help me, how to remove this error.
when we remove form authentication this error is not comming but we must need form authenti cation.

planoie · June 11th, 2010, 11:15 PM

You can't use forms authentication for a web service. If you need to secure your web services you must go about it another way. You can secure your application but expose any web services served by it without the security mechanism blocking it. Add a <location> node to the web config with the relative path of the web service and allow all users. This will leave security on the application as a whole using forms authentication but allow unauthenticated access to the service.

If you want to secure the service, you could use SOAP headers with some security information in them, or web service parameters that include some authentication data. For example, I've used encrypted strings included in SOAP headers for authenticating clients of restricted services.