ASP.NET Core - Using multiple authentication methods

Question

I'm trying to find a way to have multiple possibilities to authenticate against a controller method. The current way to authenticate against the API is through NTLM, because until now it was only possible to call the API from a windows machine. Now I also want to reach the API from a Linux server and have to use a different authentication method than NTLM (for example: use an API Key).

My question is: How can I register multiple methods for authentication and allow the request if at least one of these is successful?

Noah Stahl · Accepted Answer · 2020-07-29 14:58:12Z

1

It is possible to use multiple authentication schemes. I've used this to use both cookies and JWT together in same app. When multiple are configured, the Authorize attribute can specify which to use, for example:

[Authorize(AuthenticationSchemes = "Bearer,Cookies")]

answered Jul 29, 2020 at 14:58

Noah Stahl

7,7235 gold badges30 silver badges42 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Zalhera Over a year ago

But does this allow the call to pass if one of the two authentication options is met or only if all are met?

Noah Stahl Over a year ago

It's an "or" and passes if either of the methods succeed. I use this to authenticate web users with a cookie and API client requests with JWT.

Collectives™ on Stack Overflow

ASP.NET Core - Using multiple authentication methods

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related