How to support multiple authentication scheme in Web API Core 2?

Question

I'm developing a web api core 2.0 project.

I need support two authorization types: jwt and basic.

Inside my ConfigureServices method I've added this code:

services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme).AddJwtBearer((options) =>
{
    options.Authority = $"...";
    options.Audience = "...";
});

services.AddAuthentication(BasicAuthenticationDefaults.AuthenticationScheme)
.AddBasicAuthentication(credentials =>
Task.FromResult(
   credentials.username == "username"
   && credentials.password == "password"));

Inside my Configure method I've added this code:

app.UseAuthentication();
app.UseMvc();

And finally I've added AuthorizeAttribute on my controller:

[Authorize]
public class MioController : Controller
{ ... }

Actually work only the last authentication specified on ConfigureServices.

How can I support both authentication types? Thanks

Note: I'm using this NuGet package for basic authentication Bazinga.AspNetCore.Authentication.Basic.

Authorize attribute has related property: [Authorize(AuthenticationSchemes = JwtBearerDefaults.AuthenticationScheme)] — Evk
– Evk, Commented Mar 7, 2018 at 9:51

ilMattion · Accepted Answer · 2018-03-07 11:18:05Z

9

try Adding your authentication service in one chain

services
.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
.AddJwtBearer((options) =>
{
    options.Authority = $"...";
    options.Audience = "...";
})
.AddBasicAuthentication(credentials =>
{
    Task.FromResult(credentials.username == "username" && credentials.password == "password"));
}

and also on AuthorizeAttribute you can specify which Scheme you want to authenticate the request with

[Authorize(AuthenticationSchemes = BasicAuthenticationDefaults.AuthenticationScheme + ", " + JwtBearerDefaults.AuthenticationScheme)]

edited Mar 7, 2018 at 11:18

ilMattion

2,0192 gold badges29 silver badges53 bronze badges

answered Mar 7, 2018 at 9:48

Kahbazi

15.1k3 gold badges52 silver badges80 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

ilMattion Over a year ago

Hi Kahbazi, I've implemented your suggestions but now work only authorization with bearer (jwt).

Kahbazi Over a year ago

You need to use [Authorize(AuthenticationSchemes = BasicAuthenticationDefaults.AuthenticationScheme)] for basicAuthentication to authenticate. By default only JWT would authenticate each request

ilMattion Over a year ago

Hi Kahbazi, using BasicAuthenticationScheme i obtain the same problem but with basic authentication.

ilMattion Over a year ago

I've resolved using [Authorize(AuthenticationSchemes = BasicAuthenticationDefaults.AuthenticationScheme + ", " + JwtBearerDefaults.AuthenticationScheme)]

Collectives™ on Stack Overflow

How to support multiple authentication scheme in Web API Core 2?

1 Answer 1

4 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related