title: Security with ASP.NET Webservices using jQuery
body: <p>I have always used the Scriptmanager to handle all AJAX calls, but I am starting to expand and am playing around with using jQuery and JSON to consume an ASP.NET 3.5 Web service. I am using standard jQuery calls as you can see below, which is working wonderfully. I am concerned about security and how to ensure that I am not opening any doors by dropping the Scriptmanager. Any information is appreciated, what I have found on the net is pertaining more to  implementation rather than security. </p>
  
  <pre><code>$.ajax({
      type: "POST",
      url: "Webservices/Service.asmx/HellowWorld",
      data: "{}",
      contentType: "application/json; charset=utf-8",
      dataType: "json",
      success: function(msg) {
          alert(msg.d);
      }
  });
  </code></pre>
  
  <p><strong>UPDATE:</strong> Bumping this in the hopes someone can provide some information.</p>
  
  <p>I want to allow only authenticated users to access this service I am using ASP.NET membership services in MVC and want to ensure that my jQuery AJAX (JSON) calls are being performed by authenticated user. Any info is appreciated.</p>