Different Authentication Modes for Asp.Net MVC and Web API on the same site?

Question

I have an ASP.Net MVC4 intranet site that also has a Web API controller.

I have set Authentication = "Windows" in the web.config.

Is it possible to set the Web API only to allow Anonymous?

** Changes I've made to the WebApiConfig file per suggestions below.

 public static class WebApiConfig
{
    public static void Register(HttpConfiguration config)
    {
        config.Routes.MapHttpRoute(
            name: "DefaultApi",
            routeTemplate: "api/{controller}/{id}",
            defaults: new { id = RouteParameter.Optional }
        );      
    // Web API routes
        config.MapHttpAttributeRoutes();
        config.SuppressDefaultHostAuthentication();
        config.Filters.Add(new HostAuthenticationFilter(OAuthDefaults.AuthenticationType));
    }
}

AllowAnonymous attribute on the Web API controller? stackoverflow.com/questions/20835373/… — Rotem Varon
– Rotem Varon, Commented Oct 28, 2014 at 19:47

Taiseer Joudeh · Accepted Answer · 2014-10-28 21:38:31Z

0

Sure, inside your WebApiConfig class you need to suppress the default host authentication for the web api only, you can do it as the code below:

public static class WebApiConfig
{
    public static void Register(HttpConfiguration config)
    {
        // Web API routes
        config.MapHttpAttributeRoutes();
        config.SuppressDefaultHostAuthentication();
    }
}

answered Oct 28, 2014 at 21:38

Taiseer Joudeh

9,0731 gold badge44 silver badges45 bronze badges

Sign up to request clarification or add additional context in comments.

8 Comments

John S Over a year ago

Is this a Web API 2.2 only feature?

Taiseer Joudeh Over a year ago

Yup, it is Web API 2 feature not 1. I believe you are using Web API 1, didn't notice that your project is MVC4. :(

John S Over a year ago

I've upgraded the project so that I can use API 2.

Taiseer Joudeh Over a year ago

Perfect, hope this will solve your issue then, check it and if it worked do not forget it to mark it is as answer :)

John S Over a year ago

Now it keeps prompting me to go to the login page when I go to the non-api home page via Mysite If I use Mysite/home/index it works ok.

|

XWiśniowiecki · Accepted Answer · 2015-03-26 13:58:47Z

In my project I have achived it with the code below. The project uses Forms Authentication for MVC and Basic Authentication for WebAPI. I use Thinktecture library to achive it.

public static class WebApiConfig
{
    public static void Register(HttpConfiguration config)
    {
        config.Routes.MapHttpRoute(
            name: "DefaultApi",
            routeTemplate: "api/{controller}/{id}",
            defaults: new { id = RouteParameter.Optional }
        );

        var authConfig = new AuthenticationConfiguration();
        authConfig.AddBasicAuthentication((userName, password) => AuthenticationService.ValidateUser(userName, password));
        config.MessageHandlers.Add(new AuthenticationHandler(authConfig));

    }
}

Collectives™ on Stack Overflow

Different Authentication Modes for Asp.Net MVC and Web API on the same site?

2 Answers 2

8 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

8 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related