Policy Security support in HTTP and Web 2.0 Bindings

Scenarios

• A Web 2.0 application requires that a user get authenticated before it can access the application.
• A Web 2.0 application requires that all communication between client/server be done using SSL.
• A given service, exposed using a web 2.0 binding requires user authentication.
• A given operation, exposed using a web 2.0 binding requires user authentication.

Policy Interceptor

The design approach that is being considered is to inject policy security interceptors, that would properly validate and enforce the security intents.