Clever Geek Handbook

Providing asp.net web service for use with jquery ajax

I am using jquery ajax to fetch data from asp.net web service. I am wondering how I can provide it and work with jQuery ajax. The service is part of my web application and you must be logged into the application to access it. However, I would like to protect him even more. For example, a consultant looking for all of their clients in autocomplete is fine, but they can send a different consultant ID instead. What's the best way to ensure this? I have looked at this article here http://msdn.microsoft.com/en-us/library/w67h0dw7%28VS.71,classic%29.aspx . However, I don't know how to make this work with jquery ajax. Any help would be greatly appreciated.

+2


source to share


2 answers


As I understand it, you want to make sure you know the identity of the person using your service. If the web service is part of your application, this shouldn't be a problem when using cookies (assuming the web service is on the same domain as the site). See this e-book for some ideas.



Otherwise, you can pass temporary IDs to registered members of your site to be used in webservice calls - that way, even if the ID is stolen, it can only be used for a limited time.

+3


source


I made it more secure with encryption. I encrypt the consultant id when passing it via ajax and decrypt it server side. Obviously I am doing server side encryption and passing it to the client when rendering the page. And then ajax makes the call using that encrypted id.



+1


source






More articles:


All Articles