Web service security

[Anil Issac]

I want to permit only my application users (my windows application) to acces my webservices. For that I applied a check (for valid users against database) inside web methods. Now if unauthorized access from IIS happens, it should redirect to a login page . What will be the code to redirect from asmx page? Kindly note that I was talking about a situation when a user trying to access webservices directly from webserver. I want to provide a login page for unauthorized access?

 

[giadich]

web services are normally consumed without an UI. I suggest that you return a message to the consumer notifying it of the unauthorized access and request to login.