implementing login info for web services?

.We have to write an API to expose a couple of our functions.

1) The below is the class that we would want to be exposed as webservices. We have to put security in place so that authenticated users can use this API. Also, we should be able to track their usage into a database.

I guess this is a simple solution. How can I comeup with a robust solution, say for growing business, if we want to expose Trucks we have (hypothetical).


Client{
         int userName;
         string Passowrd;
}



public class OurCars {

 GetCarInfo( int CarID, ref Client client);
 GetCars(ref Client client);
 GetOtherCars(ref Client client);

}



tech_questionAsked:
Who is Participating?
 
topdog770Connect With a Mentor Commented:
implied pieces seem to be:

Admin piece that allows users to be created, assigned password, optionally assigned rights to specific cars or functionality

// one approach
Web service that provides user authentication [and admin functions?]
Web service that provides vehicle admin functions [ data creation needed? ]
Web service that provides access to car data
0
 
topdog770Commented:
It seems like, at the simplest you are already there..

Have form data that asks for a user name and password and obtains a vehicle id number

make a web service call, GetCarInfo for example, that:

1. determines if the user name and password are valid
2. determines if validated user has rights to get car info and possibly for specific vehicle id number
3. returns the car information for specific vehicle id number



0
All Courses

From novice to tech pro — start learning today.