how to disable WebService call from other domains

2020-05-01 09:16发布

问题:

i want to avoid the others to access my webservice.

I have Web Service called WebService.asmx, which is hosted in www.xyz.com and we know that we can access the service like http://www.xyz.com/WebService.asmx

  1. How to avoid Listing all the Functions
  2. Other should not Add as " Web Reference and they should call my web service functions "

please help me to solved these issues, my project is running and i want to avoid this issues...

advance thanks

回答1:

One way of doing this is to authenticate all your requests to your methods and reject the calls that are not authenticated. A very detailed answer is given here.



回答2:

Web Services can be checked form the firewall where request is coming. It can checked by the content-type of the response. All webservices have "application/soap-xml" as content-type.