I am currently working on an iPhone application. This application accesses WCF services open through my ASP.NET web application. Currently my WCF operation is as follows:
[OperationContract]
[WebInvoke(Method = "POST")]
public string SubmitMessage(string message, int priority)
{
try
{
}
catch (Exception)
{
}
}
My web application uses ASP.NET Forms Authentication. My task is that I want authenticated users to be able to call this operation from their iPhone. I know that the iPhone SDK has baked XML support. However, I'm not sure how to block my WCF so that only an authenticated user can access it.
How to make my WCF work available only to authenticated users from third-party applications?
thank