Windows authentication and Asp.Net Web API

Question

I have an Intranet application with Windows authentication based on MVC4.

When I need the WindowsIdentity for authorization purpose in a Controller I just use

 HttpContext.User.Identity

Now I wanted to use the new Asp.Net WebAPI for some Ajax calls.

Is there a way to get the WindowsIdenty object in the same easy way as in an MVC Controller?

Community · Accepted Answer · 2017-05-23 12:02:39Z

24

Please don't reference the HttpContext from a controller.

You can access the Controllers User property which is way of accessing the Identity through without a dirrect reference to HttpContext.

public class MyController : ApiController
{
    public string Get()
    {
         var indenty = this.User.Identity;
    }
}

Why

The controllers User property provides a level of abstraction which allows for easier mocking and thus unit testing. This abstraction also allows for greater portability e.g. if this was WebApi Self Host you wouldn't even have access to HttpContext.

To read more about how to unit test and mock the User property read here. For more information re: portability read here.

edited May 23, 2017 at 12:02

CommunityBot

11 silver badge

answered Feb 14, 2013 at 13:44

Mark Jones

12.2k2 gold badges52 silver badges62 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

agez Over a year ago

One small clarification: If you want the Identity use User.Identity

dansan Over a year ago

Well I appreciate the clarity of the answer, it would be for everyone's edification if you explained WHY one wouldn't reference HttpContext from a controller.

Mark Jones Over a year ago

@dansan thanks for the comment. I have put a brief explanation as to why.

Collectives™ on Stack Overflow

Windows authentication and Asp.Net Web API

1 Answer 1

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related