具有 WCF 服务的 AspNetMembership 提供商

Question

我正在尝试将 AspNetMembershipProvider 配置为用于在使用 basicHttpBinding 的 WCF 服务中进行身份验证。我有以下配置：

<system.serviceModel>
  <serviceHostingEnvironment aspNetCompatibilityEnabled="true" />
  <bindings>
    <basicHttpBinding>
      <binding name="basicSecureBinding">
        <security mode="Message"></security>
      </binding>
    </basicHttpBinding>
  </bindings>
  <behaviors>
      <serviceBehaviors>      
        <behavior name="MyApp.Services.ComputersServiceBehavior">
          <serviceAuthorization roleProviderName="AspNetSqlRoleProvider" principalPermissionMode="UseAspNetRoles" />
          <serviceCredentials>
            <userNameAuthentication userNamePasswordValidationMode="MembershipProvider" membershipProviderName="AspNetSqlMembershipProvider"/>
          </serviceCredentials>
          <serviceMetadata httpGetEnabled="true" />
          <serviceDebug includeExceptionDetailInFaults="true" />
        </behavior>

      </serviceBehaviors>
  </behaviors>
  <services>
      <service behaviorConfiguration="MyApp.Services.ComputersServiceBehavior" name="MyApp.Services.ComputersService">
          <endpoint binding="basicHttpBinding" contract="MyApp.Services.IComputersService" />
          <endpoint address="mex" binding="mexHttpBinding" contract="IMetadataExchange" />
      </service>
  </services>
</system.serviceModel>

启用角色并配置成员资格提供程序（其适用于网站）。

但身份验证过程根本没有被触发。请求期间没有对数据库的调用，当我尝试在方法上设置以下属性时：

 [PrincipalPermission(SecurityAction.Demand, Authenticated = true)]
 public bool Test()
 {
     return true;
 }

我收到访问被拒绝的异常。有什么想法如何解决它吗？

Answer 1

尝试一下CodePlex 安全指南、操作方法和应用场景 提供了许多配置选项的详细设置和配置指南，可以帮助您找到拼图中缺失的部分。