Allow windows and basic authentication in asp.net core web project

Question

I am not sure if this is the way to go but here is what I am trying to achieve. I have two different types of controller action methods. And I need two different authentication method on each of them.

E.g. HomeController

[Authorize(AuthenticationSchemes = "Windows")]
public class HomeController : Controller
{
    public IActionResult Index()
    {
        return View();
    }
}

ServiceController

[Authorize(AuthenticationSchemes = "BasicAuthentication")]
[Route("api/my-service")]
[ApiController]
public class ServiceController : ControllerBase
{
    [Route("Evaluate")]
    [HttpPost]
    public EvaluateResponse Evaluate([FromBody]EvaluateRequest request)
    {
        //return something;
    }
}

Startup.cs (ConfigureServices)

services.AddAuthentication(IISDefaults.AuthenticationScheme);
services.AddAuthentication("BasicAuthentication")
            .AddScheme<AuthenticationSchemeOptions, BasicAuthenticationHandler>("BasicAuthentication", null);

Startup.cs (Configure)

app.UseAuthentication();

Code for Basic authentication is implemented like mentioned here.

Now, if I am trying to invoke api/my-service/Evaluate it's still invoking windows authentication.

How can I implement two different authentication technique, one for HomeController and another for ServiceController?

@RyanWilson I went through that article already. I am not able to understand, how would I tell HttpRequest to bypass windows authentication, validate based on basic authentication if it is redirected to ServiceController? — Shaggy
– Shaggy, Commented Jul 18, 2019 at 19:13
You can specify different authentication schemes for different controllers. — Vidmantas Blazevicius
– Vidmantas Blazevicius, Commented Jul 18, 2019 at 19:18
@Shaggy This shows how to use both Jwt and Basic in the same project, it's an API project but it should still be able to show you what you need (stackoverflow.com/questions/49148648/…). I'm kind of confused by your architecture though, if your Service contains API's exposed to the outside world as you put it, why not make it it's own standalone entity, and call out to it from the web project? — Ryan Wilson
– Ryan Wilson, Commented Jul 18, 2019 at 19:18
Let's just assume I'd like to have windows authentication on one controller and basic authentication on another controller. I have updated my question with the required code. Thanks. — Shaggy
– Shaggy, Commented Jul 18, 2019 at 19:47

Shaggy · Accepted Answer · 2019-07-29 18:37:31Z

0

My code was working, just needed to add following in launchSettings.json file

{
  "iisSettings": {
    "windowsAuthentication": true,
    "anonymousAuthentication": true
     }
}

answered Jul 29, 2019 at 18:37

Shaggy

5,91030 gold badges107 silver badges170 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Jon Lwiza · Accepted Answer · 2021-10-20 16:47:28Z

0

you should not need to put windowsAuthentication for basic authentication

it should look like "iisSettings": { "windowsAuthentication": false, "anonymousAuthentication": true, "iisExpress": { "applicationUrl": "http://localhost:xxxx", "sslPort": xxxxx } }

answered Oct 20, 2021 at 16:47

Jon Lwiza

1

Collectives™ on Stack Overflow

Allow windows and basic authentication in asp.net core web project

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related