Secure web site and service in one authentication

[KiranShakya]

I am new in developing web sites with ArcGIS Javascript API but I managed to develop one.  Now I am looking forward to have an authentication in the web site.  I want a single authentication which can enable both web site and secured web service.

Can anyone suggest be the steps or have code samples?

I don???t know did I posted a silly question

Thank you all

Kiran

[RichardWatson]

We wanted to secure ArcGIS Server using database credentials so we developed a custom ASP.NET security provider.

We also wanted to secure our website so we implemented ASP.NET forms authentication using the same security provider.  This website is one which generates tokens and all entire ArcGIS Server system lives behind the firewall.  We do not hand out tokens.

We also provide our own REST endpoints via the website but getting that to work with ASP.NET forms authentication was tricky, i.e. there is no interactive user.  In hindsight, I think that we should have implemented custom basic authentication.

Security is a deep subject and I am doubtful that you will find simple or easy answers.  You will need to roll up your shirt sleeves and dig in!