php - How to do authentication using SOAP? -
how authenticate users soap?
will have require user send username , password every soap request , authenticate him against database?
doesn't seem cause unnecessary queries?
an easier way authenticate on first query, build session record on server side containing remote ip address , token give client authtoken. have client pass authtoken in future queries. authtoken has match internal session data keep client, allow avoid having make round-trips database authentication.
that said, @marcus adams has point below regard stateless-ness. there people out there pushing sorts of soap security models. ws-security current state of art, here. work putting authentication information in soap header - after all, that's why soap message contains both header , bodypart.
Comments
Post a Comment