dotnet/aspnetcore

Add an AutomaticChallenge option to disable HttpSys from adding auth headers on 401

Open

#5,888 创建于 2018年6月18日

在 GitHub 查看
 (10 评论) (0 反应) (0 负责人)C# (10,653 fork)batch import
affected-very-fewarea-networkingenhancementfeature-httpsyshelp wantedseverity-nice-to-have

仓库指标

Star
 (37,933 star)
PR 合并指标
 (平均合并 16天 9小时) (30 天内合并 258 个 PR)

描述

Hi , I have a REST API appilcation hosted on HTTP.Sys with windows authetication option enabled . The REST API is protected by "Bearer" authentication scheme . Once the API invoked with invalid token the authentication scheme returns 401 with "WWW-Authenticate" "Bearer" header . Since application is hosted on HTTP.Sys the additional "WWW-Authenticate" "Negotiate" header has been added by AuthenticationManager of Http.Sys . The application uses windows authentication only in the user authentication endpoint . Is there a way to add windows authentication to specific route once hosted on http.sys ?

贡献者指南