Assume I have a service that has about 10 operations, but 2 of them are nee开发者_运维技巧ded for intranet purposes only. How would I configure the two operations to be restricted only to the intranet?
The same WCF service can expose multiple contracts. Put the internet operations in a seaparate interface and expose it using security settings that make sense for an intranet environment.
For example: Your internet operations could have an endpoint that uses UserName security and publishes the operations via a mex point. The intranet operations could have an endpoint that uses Windows based security and doesn't expose a MEX point.
精彩评论