I have a WCf service where raw message is passed from server to client using Message Object(servicemodel.channel) , I have to create a开发者_运维技巧 token management system in this. i.e user will provide me the user name and password i will validate it and provide a token then every time i will authorize the token or there will be a timer after which this token will reset..any suggestion for this requirement...
why do you need to do this by yourselves? WCF has done the similiar thing for you if you enable security context. In this case, WCF will set up security context between client and server once the authentication and authorization was done successfully.
In the subsequent request, the server won't authenticate the username and password until the security context is timeout.
I think this should satisfy your requirement.
These links may help you:
secure conversion and secure session
精彩评论