How to configure secure RESTful services with WCF using username/password + SSL

Question

I'm looking to write a config file that allows for RESTful services in WCF, but I still want the ability to 'tap into' the membership provider for username/password authentication.

The below is part of my current config using basicHttp binding or wsHttp w/out WS Security, how will this change w/ REST based services?

    <bindings>         <wsHttpBinding>             <binding name="wsHttp">                 <security mode="TransportWithMessageCredential">                     <transport/>                     <message clientCredentialType="UserName" negotiateServiceCredential="false" establishSecurityContext="false"/>                 </security>             </binding>         </wsHttpBinding>         <basicHttpBinding>             <binding name="basicHttp">                 <security mode="TransportWithMessageCredential">                     <transport/>                     <message clientCredentialType="UserName"/>                 </security>             </binding>         </basicHttpBinding>     </bindings>     <behaviors>         <serviceBehaviors>             <behavior name="NorthwindBehavior">                 <serviceMetadata httpGetEnabled="true"/>                 <serviceAuthorization principalPermissionMode="UseAspNetRoles"/>                 <serviceCredentials>                     <userNameAuthentication userNamePasswordValidationMode="MembershipProvider"/>                 </serviceCredentials>             </behavior>         </serviceBehaviors>     </behaviors> 

Answer 1

Here's a podcast on securing WCF REST services with the ASP.net membership provider:

http://channel9.msdn.com/posts/rojacobs/endpointtv-Securing-RESTful-services-with-ASPNET-Membership/