dotnet/aspnetcore

Add an AutomaticChallenge option to disable HttpSys from adding auth headers on 401

Open

#5,888 建立於 2018年6月18日

在 GitHub 查看
 (10 留言) (0 反應) (0 負責人)C# (10,653 fork)batch import
affected-very-fewarea-networkingenhancementfeature-httpsyshelp wantedseverity-nice-to-have

倉庫指標

Star
 (37,933 star)
PR 合併指標
 (平均合併 16天 9小時) (30 天內合併 258 個 PR)

描述

Hi , I have a REST API appilcation hosted on HTTP.Sys with windows authetication option enabled . The REST API is protected by "Bearer" authentication scheme . Once the API invoked with invalid token the authentication scheme returns 401 with "WWW-Authenticate" "Bearer" header . Since application is hosted on HTTP.Sys the additional "WWW-Authenticate" "Negotiate" header has been added by AuthenticationManager of Http.Sys . The application uses windows authentication only in the user authentication endpoint . Is there a way to add windows authentication to specific route once hosted on http.sys ?

貢獻者指南