How to manage sessions in Restful WCF Service

Question

I want to manage client application sessions with my Restful WCF Service. The client application may be a J2me application or a .NET application.

What is the recommended way to conduct sessions in the RESTFUL WCF service?

The idea is to recognize that the request comes from a client that has already passed the test.

Answer 1

REST determines that the interaction is void, the client state is not supported on the server, so you want to get away from the RESTful interface.

I can’t imagine a situation where you want to maintain client status on a server that provides WCF services. I think you need to take a look at your architecture, as you might be going to incur a lot of technical debt.

Answer 2

You may find this question helpful: REST API / web service security guidelines

I think that here you need to calm down to send the user credentials for each request, if you can make it transparent to the user and not compromise the credentials. If you cannot do this, cookies for the sole purpose of maintaining customer identification have become a common concession among developers of quiet services. Just don’t go store anything else with a cookie.