How do you security at restful WCF service?

See more:

WCF

REST

WCFServices

Hi,

I am developing a wcf restful and soap service. I use WebGet attribute in service interface. I define binding="webHttpBinding" in configuration file. How do you security at restful WCF service?

My servicemodel node :

<system.serviceModel>
    <services>

      <service name="TestService.LisansService" behaviorConfiguration="ServiceBehaviors" >
        <endpoint contract="TestService.ILisansService" binding="wsHttpBinding" />
        <endpoint address="json" binding="webHttpBinding" contract="TestService.ILisansService"  behaviorConfiguration="RestServiceBindingBehaviorJSON" bindingConfiguration="webHttpBindingJSON"></endpoint>
        <endpoint address="xml" binding="webHttpBinding" contract="TestService.ILisansService" behaviorConfiguration="RestServiceBindingBehaviorXML" bindingConfiguration="webHttpBindingXml"></endpoint>

      </service>

    </services>

    <behaviors>
      <endpointBehaviors>
        <behavior name="RestServiceBindingBehaviorJSON">
          <webHttp helpEnabled="true" defaultOutgoingResponseFormat="Json" />
        </behavior>
        <behavior name="RestServiceBindingBehaviorXML">
          <webHttp helpEnabled="true" defaultOutgoingResponseFormat="Xml" />
        </behavior>
      </endpointBehaviors>
      <serviceBehaviors>


        <behavior name="ServiceBehaviors">
          <serviceMetadata httpGetEnabled="true" httpsGetEnabled="false" />
          <serviceDebug includeExceptionDetailInFaults="false" />
          <serviceCredentials>
            <serviceCertificate findValue="localhost" x509FindType="FindBySubjectName"
                             storeLocation="LocalMachine" storeName="My" />
            <userNameAuthentication userNamePasswordValidationMode="Custom"
             customUserNamePasswordValidatorType="TestService.UserAuthentication, TestService" />
          </serviceCredentials>
        </behavior>
        
      </serviceBehaviors>
    </behaviors>

    <bindings>
      <wsHttpBinding>
        <binding>
          <security mode="Message">
            <message clientCredentialType="UserName"/>
          </security>
        </binding>
      </wsHttpBinding>
      <webHttpBinding>

        <binding name="webHttpBindingXml"></binding>
        <binding name="webHttpBindingJSON">
          <security mode="Transport"></security>
        </binding>
      </webHttpBinding>
    </bindings>
    <protocolMapping>
      <add binding="basicHttpsBinding" scheme="https" />
    </protocolMapping>
    <serviceHostingEnvironment aspNetCompatibilityEnabled="true" multipleSiteBindingsEnabled="true" />
  </system.serviceModel>

Thanks.