I have an ASP.NET MVC application that has a .asmx web service
I wrote an action filter attribute that I wanted to use on web methods on the web service, to check the Request headers for a UserID and Password, and throw an unauthorized response code if invalid or not present.
However, they dont appear to get called! Breakpoints just dont get hit.
Firstly, is using MVC attributes an acceptable way of authorizing web service called on an ASMX web service?
Secondly, is there a better/more efficient way of authorizing web service method calls?