formsAuthentication without configuring in web.config

[Tim Mackey]

Hi,
I have a web site that uses normal windows authentication.
I have a web service on the site that i want to configure Forms
Authentication for, but it obviously doesn't fire unless i change the
setting in web.config. is it possible to use formsAuthentication only for
the web service?

i tried using a custom httpModule, but i don't think my own encryption
efforts would be as good as what's used in FormsAuth to encrypt the ticket.

thanks for any tips
tim mackey.
--------------------------
67d0ebfec70e8db3

[Svein Terje Gaup]

Tim,

Correct me if I'm wrong, but using Forms Authentication requires user
interaction. It isn't suited for WebServices.

Sincerely
Svein Terje Gaup

"Tim Mackey" <tim@scootasp.net> wrote in message
news:2ibl0nFkusjlU1@uni-berlin.de...

> Hi,
> I have a web site that uses normal windows authentication.
> I have a web service on the site that i want to configure Forms
> Authentication for, but it obviously doesn't fire unless i change the
> setting in web.config. is it possible to use formsAuthentication only for
> the web service?
>
> i tried using a custom httpModule, but i don't think my own encryption
> efforts would be as good as what's used in FormsAuth to encrypt the

ticket.

>
> thanks for any tips
> tim mackey.
> --------------------------
> 67d0ebfec70e8db3
>
>

[Mary Chipman]

You might want to grab the "Building Secure ASP.NET apps" whitepaper,
which you can download from
[url]http://www.microsoft.com/downloads/release.asp?ReleaseID=44047[/url]. It has
more than you need, but you can read the rest later when you need it
:-)

--mary

On Fri, 4 Jun 2004 17:06:46 +0100, "Tim Mackey" <tim@scootasp.net>
wrote:

>Hi,
>I have a web site that uses normal windows authentication.
>I have a web service on the site that i want to configure Forms
>Authentication for, but it obviously doesn't fire unless i change the
>setting in web.config. is it possible to use formsAuthentication only for
>the web service?
>
>i tried using a custom httpModule, but i don't think my own encryption
>efforts would be as good as what's used in FormsAuth to encrypt the ticket.
>
>thanks for any tips
>tim mackey.
>--------------------------
>67d0ebfec70e8db3
>

[Tim Mackey]

Hi Svein,
I thought this too, but dotnetjunkies has an article explaining how its
done.
[url]http://www.dotnetjunkies.com/Tutorial/5D8B6D51-97B7-4825-B919-49A721A3FDF6.dcik[/url]

some modifications are necessary to work around the user-interaction part.
it suits me fine except i can't figure out how to only apply
formsauthentication for myService.asmx and not the whole app.

any thoughts?
thanks
tim