Search code examples
c#wcfloggingwcf-security

How to crack WCF MessageLog "stream"?

A developer created a WCF web service. It takes the username & password (in hash) of a user and let's them access the data (if they exist in our DB). I think, by default, WCF logs every request and response. In the message logs, I just see

<MessageLogTraceRecord>... stream ...</MessageLogTraceRecord>

how can I find out what's in that stream?

Note: I just want to know if the user passed or failed (true or false) in getting through to the web service using their login credentials.

Thanks in advance.

Solution

  • Message logging is not feature for security audit. If you want to audit successful or failed authentication and if your security model is integrated with WCF security pipeline you can try to use Service Auditing Behavior. You will get all information about authentication in your Windows log.