问题:

I want to manage Sessions with client apps of my Restful WCF Service. Client app can be a J2me application or a .NET application.

What is the recommended way of maintaining sessions in RESTFUL WCF service?

Idea is to recognize that the request is coming from an already authenticated client.

回答1:

REST defines that the interaction is stateless, no client state is maintained on the server so you are looking to move away from a RESTful interface.

I cannot imagine a situation where you would want to maintain client state on a server that's providing WCF services. I think you need to look at your architecture as you are possibly about to cause yourself a lot of technical debt.

回答2:

This question may be useful to you: Best Practices for securing a REST API / web service

I think they restful thing to do here is to send the user credentials on each request if you can do that in a way that is transparent to the user and doesn't compromise the credentials. If you can't do that, cookies for the sole purpose of maintaining client identity have become a common concession among developers of restful services. Just don't go storing anything else with the cookie.