OpenAccess Domain Service security for Kendo UI

[Simon]

Hello,

I did manage to add the JSONP support to my OpenAccess Domain Service and now I'm able to use my service to feed a kendo UI grid.

Now I need to secure the OpenAccess Domain Service to prevent my data from behing fully accessible without a proper authentication.

So what is the simplest way to secure the OpenAccess Domain Service in a Kendo UI application context? (And is there any documentation on how to do it?)

Regrads,

Simon

[Serge]

Hello Simon,

 Unfortunately we do not have examples for implementing authentication with OpenAccess or Kendo UI. Both products however will not stand in your way if you try to implement the authentication options you are most comfortable with. It basically boils down to securing a WCF Data Service and providing the correct credentials to that service using the Kendo DataSource. 

There is a great blog series on msdn called OData and Authentication that you can have a look at, that described in detail all of the different options for securing an OData service. 

I hope this is helpful.

Kind regards,
Serge
the Telerik team

[pomi]

Hi Serge

I was also looking for securing services exposed by OpenAccess to be used in Kendo UI project. There are examples out there on Google but not very precise in terms of Kendo UI.

Since this is a real life scenario and we developers moving from pure server side code e.g. asp.net webforms to client side Kendo UI, can sure make use of such example.

Hope someone put an effort in it.

Kind Regards

Pomi

[Serge]

Hello Simon, 

 Unfortunately there isn't much on the table from our side either (example wise). At the moment we have no examples showing off how to implement authentication as this is something that is usually very specific to the application logic.

We are planning on implementing examples that show off how to implement authentication for services that we generate. However I am not yet sure when they will be available. 
 
All the best,
Serge
the Telerik team

[Serge]

Hello, 

 I forgot to mention that while using JSONP you will not be able to implement any kind of security using Kendo. You will have to just use JSON.
 
Greetings,
Serge
the Telerik team

[Simon]

Hi Serge,

I think I have to disagree on this one.

I did an application that is storing a username and password in session variables.  Then I added some query interceptors to filter the records returned by the OpenAccess Domain Service based on the user rights and it worked perectly.

I'm not a security guru but I think this is some kind of authentication for KendoUI and JSONP, isn't?

Simon

[Serge]

Hello Simon,

 While I am no guru myself , I will suggest having a look at this stack overflow question and the wikipedia article on JSONP. This is what I was referring to.
 
Kind regards,
Serge
the Telerik team