从 Silverlight 应用程序调用 SharePoint Web 服务安全吗？
在公共 Internet 场景中，是否可以从 Silverlight 应用程序（托管在同一站点中）调用 SharePoint Web 服务？这安全吗？
SharePoint 网站是一个面向公众的网站。
In a public internet scenario, is it possible to call the SharePoint Web Services from within a Silverlight application (hosted in the same site)? Is this secure?
The SharePoint site is a public-facing one.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
是的，这是可能的。假设 Silverlight 应用程序是从与 Sharepoint 站点相同的主机加载的，您应该能够创建对 Sharepoint Web 服务的服务引用。
如果不是同一主机，您必须创建一个 clientaccesspolicy.xml 文件（通过 google 搜索）并将其部署到您的 Sharepoint 站点，以便允许您的 Silverlight 应用程序访问 Sharepoint Web 服务。
凭证应该通过，因为 SL 默认使用浏览器的网络堆栈 - 并且浏览器应该已经通过 Sharepoint 的身份验证。如果情况并非如此，那么您在这方面将需要做一些工作。
就其安全而言——这取决于您所说的安全是什么意思。它将与使用浏览器访问 Sharepoint 站点一样安全。为了使其真正安全，您必须将站点置于 SSL 后面，并通过 SSL 访问 Web 服务。
Yes it is possible. Assuming the Silverlight app is loaded from the same host as the Sharepoint site, you should be able to just create a Service Reference to the Sharepoint Web Services.
If it is not the same host, you will have to create a clientaccesspolicy.xml file (google it) and deploy it to your Sharepoint site in order allow your Silverlight app to access the Sharepoint Web Services.
Credentials ought to flow through, as the default is for SL to use the Browser's network stack - and the browser ought to have already authenticated to Sharepoint. If that is not the case, then you will have some work to do in that regard.
As far as it being secure - well that depends on what you mean by secure. It will be as secure as someone accessing the Sharepoint site with a browser. To make it truly secure you would have to put the site behind SSL, and access the Web Services through SSL.