c# - Confidence rules between applications -


i have 2 different applications on asp.net mvc running on same server.

both apps works against same database, shows different data users (they used different users).

the fact there methods on model of firstly created app i'd use on second one, , don't wanna duplicate model logic behind methods.

so i'm using server call 1 app another, call executes controller calls target method , returns response.

it works fine, don't have controller open user calling it. it's not particulary critical information seems me serious security problem.

so i've been studying different options.

  • i can let particular controller open knowing it's out there. bad.
  • i can, somewhat, prompt users login when method called. petition transparent user i'd maintain way.
  • i can elaborate token-dance between both applications similar authentication through oauth protocol ensure app1 accepts login on app2 , executes without direct login, seems lot of work should quite light in overall project.
  • i can let controller open anyone, on execution check machine petition coming , throwing exception if isn't same running server (both apps runs on same server) instead of returning result.

at moment idea likes me last one. wonder if out there sees obvious no-no i'm not being aware of or can suggest better approach this.

also i'm getting dificulties checking application server , requesting machine. throw light how check this?

maybe apps should not communicate on http @ all. maybe can move common code library project can share.

i understand both apps have full access same database. work under model.


Comments

Popular posts from this blog

java - activate/deactivate sonar maven plugin by profile? -

python - TypeError: can only concatenate tuple (not "float") to tuple -

java - What is the difference between String. and String.this. ? -