dotnet/aspnetcore

Add an AutomaticChallenge option to disable HttpSys from adding auth headers on 401

オープン

#5,888 opened on 2018/06/18

 (10 件のコメント) (0 件のリアクション) (0 人の担当者)C# (10,653 件のフォーク)batch import
affected-very-fewarea-networkingenhancementfeature-httpsyshelp wantedseverity-nice-to-have

Repository metrics

Stars
 (37,933 個のスター)
PR merge metrics
 (PR metrics pending)

説明

Hi , I have a REST API appilcation hosted on HTTP.Sys with windows authetication option enabled . The REST API is protected by "Bearer" authentication scheme . Once the API invoked with invalid token the authentication scheme returns 401 with "WWW-Authenticate" "Bearer" header . Since application is hosted on HTTP.Sys the additional "WWW-Authenticate" "Negotiate" header has been added by AuthenticationManager of Http.Sys . The application uses windows authentication only in the user authentication endpoint . Is there a way to add windows authentication to specific route once hosted on http.sys ?

コントリビューターガイド