windows Authorization in ReactJS and .NET Core API

Question

We have a new application which is having ReactJS as front end and back end is .NET Core API.

A requirement is to authorize the windows logon user with respect to Active Directory.

The .NET Core API will be doing the Authorization part.

We have used the following code in .NET Core API but it is returning the ID under which the App-Pool of .NET Core API is running. We tried setting the API on Windows Authentication enabled but it did not work as well.

            dynamic userIdentity = WindowsIdentity.GetCurrent();
            dynamic userPrincipal = new WindowsPrincipal(userIdentity);
            string Admin = _configuration["AppUserRoles:Admin"];
            result = userPrincipal.IsInRole(Admin);

I have changed the code to the following:

            dynamic userIdentity = WindowsIdentity("UserID");
            dynamic userPrincipal = new WindowsPrincipal(userIdentity);
            string Admin = _configuration["AppUserRoles:Admin"];
            result = userPrincipal.IsInRole(Admin);

We need to pass the the UserID from ReactJS to the API Layer.

In ReactJS I have tried the following:

            var path = require('path');
            var userName = process.env['USERPROFILE'].split(path.sep)[2];
            var loginId = path.join("domainName",userName);

But this is not working in ReactJS.

Is there a way we can fetch the Windows Logon ID in React JS and pass it to the API layer for authorization?

maybe take a look at helloJS? It supports windows authentication — Marek Urbanowicz
– Marek Urbanowicz, Commented Jan 25, 2018 at 13:39

user3363495 · Accepted Answer · 2018-02-08 20:26:55Z

5

We were able to get this done by the following approach:

under IIS we hosted the website as follows:

Added a website ReactJSWeb.

i. Added .NETCore virtual directory under the ReactJS website.

Both Main website and Virtual directory had Authentication set as Windows Authentication Enabled.

In .NET Core API - authentication module we added a Attribute [Authorize] on the class and added the following code in the method:

using Microsoft.AspNetCore.Authorization;

        dynamic userIdentity = WindowsIdentity(**User.Identity.Name**);
        dynamic userPrincipal = new WindowsPrincipal(userIdentity);
        string Admin = _configuration["AppUserRoles:Admin"];
        result = userPrincipal.IsInRole(Admin);

This worked and we are now able to do the Authorization properly based on the Active Directory security group the user is part of.

answered Feb 8, 2018 at 20:26

user3363495

1552 silver badges10 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

milespossing Over a year ago

Seconded. This would be extremely helpful to read with more context

Developer90 Over a year ago

Seconded. Same problem for me

Gilberto Couto · Accepted Answer · 2020-05-04 21:40:59Z

0

Is it possible to share what you did to have client authenticated following that approach? I'm getting crazy with a similar scenario like yours...

I very appreciate that.

answered May 4, 2020 at 21:40

Gilberto Couto

12 bronze badges

2 Comments

If_You_Say_So Over a year ago

Please don't use the answers section for your question. You can always ask questions...

Gilberto Couto Over a year ago

Sorry about that! But I would like to do some comments (or questions) here, but I don`t have enough points to do that... Sorry!

Collectives™ on Stack Overflow

windows Authorization in ReactJS and .NET Core API

2 Answers 2

2 Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related