c# - Storing plain text password in session .NET -
I use WSDL (service is SpiraTest) to work on another .NET application to connect to another service I am I have to call the authentication method in each request. The problem is that the service provides a method to authenticate only with the username and plain-text password. What would be a good way to save user names and plain passwords? I'm considering putting them in a session if I have no better option? Login to access the application with the user identity and I use the same credentials to contact the remote service. Users log on only once, but each time they navigate through the pages that need data from the remote service, I use the credentials to login while it is required that the user be certified.
I am not familiar with the ASP.NET session, but I am assuming that they are similar to PHP sessions . In that case, the actual session data is placed in one. If you are trying to see this password to your users, then I think it would be enough to keep them in session.
However, you have not told us exactly how this user name and password exists and is used only if you have a username / password that your application web service If you use it to make a request, then there is no point in keeping it in session at all. Just store them in a global config
Comments
Post a Comment