I have been using ASP.NET Forms security for 3 years now.. but don't really understand how it works with WCF Service Interaction.
Scenario:
WPF Application is started. A Login Challenge Form is throw to the user to gather username password.
From the Login UserControl, I hit WCF Authentication Service and gather the cookie.
The cookies values returned are ASP.NET_SessionId and .ASPXAUTH
At this point, I can hit another WCF Service (different Domain Name and everything) with Forms Authentication Enabled. As long as I add the Authentication Cookies to the header before the service call, the Service will authenticate just fine.
On the service constructor, I can use the HTTPContext to verify if the user is Authenticated.
My Question:
How does my second service call validate the authenication cookie without having any knowledge of the Aut ...
Go to the complete details ...