I have a WCF client hosted in IIS7 and a WCF service hosted in IIS7. The client is strictly http / javascript, and I would like to keep it that way.
When I go to the clientβs web page, Iβll be asked to enter my Windows Authentication credentials because the page is secure (and served using https). Once I am authenticated, my AJAX calls to the service (from the client) are not processed, because I am never given the opportunity to authenticate to the service itself.
What is the best way to implement security if I want to protect access to the service using Active Directory credentials but without using .NET libraries?
The specific response returned by the service is "401 (unauthorized)." Please note that the service is also served using https.
Chad_c
source share