dotnet/maui

WebAuthenticator custom headers for http client

Open

#23,633 opened on Jul 16, 2024

View on GitHub
 (4 comments) (1 reaction) (0 assignees)C# (23,245 stars) (1,951 forks)batch import
area-essentialsgood first issueplatform/androids/triagedt/enhancement ☀️

Description

Description

Is there an option or workaround for passing custom headers using WebAuthenticator?

Steps to Reproduce

  1. Create MAUI project
  2. Invoke WebAuthenticator.AuthenticateAsync()

Link to public reproduction project repository

No response

Version with bug

8.0.40 SR5

Is this a regression from previous behavior?

No, this is something new

Last version that worked well

Unknown/Other

Affected platforms

Android, I was not able test on other platforms (but the basic problem is the same for all other platforms)

Affected platform versions

No response

Did you find any workaround?

No response

Relevant log output

No response

Contributor guide

Tech stack
csharpandroid
Domain
mobileauthentication
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Basic understanding of .NET MAUIFamiliarity with WebAuthenticator API
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60
Research direction
Start by examining the WebAuthenticator implementation in the MAUI source code, likely in src/Core/src/Platform/Android/Authentication/WebAuthenticator.cs. Investigate how the HTTP client is constructed and whether custom headers can be added via AuthenticationProperties or a new parameter. Look at linked issues or comments for prior discussion (e.g., comment #23633-1234). Consider adding a new overload to AuthenticateAsync that accepts headers, or extending the existing options. Test on Android first, then other platforms.