WCF Data Services Security Options

What options are there for securing WCF Data Services? The开发者_JAVA百科 open, RESTful nature of the services are extremely beneficial but I need to lock these services down so that only my Silverlight and WPF apps can perform requests against these services. The app will be distributed publicly, but our data and data model are not free for public consumption.

---

Besides all the things already mentioned, WCF Data Services also have a concept called Query Interceptors which allows you on a programmatic basis to decide whether or not a given caller should be able to see all, some or no data at all.

---

http://msdn.microsoft.com/en-us/library/ms735093.aspx

Simple transport level security, which could be SSL. Or Message Security which could involve sending credentials in the soap header (WS-* standards).

---

Transfer security - SSL, credentials - CardSpace, certificates... http://wcfsecurity.codeplex.com/Wikipage