c# .net Web Api Windows and Anonymous Authentication get current user

Question

I'm trying to get the local user, but I have no return.

WebApi
IIS (10) Windows 10

My IIS Enabled:

Windows
Basic
Anonymous

Visual Studio 2017 C# .net 4.6.1

I already tried to tag the web config:

  <authorization>
  <allow users="?" />
</authorization>
AND
<identity impersonate="false" />
<authentication mode="Windows" />

Code WebApi

 [HttpGet]
    [Authorize]//I already tried [AllowAnonymous]
    public User Get()
    {
        System.Net.NetworkCredential SystemCredential = (System.Net.NetworkCredential)ADUtil.SystemCredential();
        string login = HttpContextUtil.Request.LogonUserIdentity.Name;
error here, login return 'NT AUTHORITY\IUSR'.
}

Disable anonymous access.

Davesoft
– Davesoft

2018-08-30 14:27:58 +00:00
Commented Aug 30, 2018 at 14:27 — Davesoft
– Davesoft, Commented Aug 30, 2018 at 14:27

ste-fu · Accepted Answer · 2020-07-13 13:18:33Z

1

You can't mix modes of Authentication within an application without getting in a mess. You have to pick one and stick to it.

The AllowAnonymous attribute let you access specific controllers without Authentication. Whether they are authenticated or not depends on your method of Authentication. It is usually used to access Login pages, but may also be used for areas of the site that you don't need to restrict access to.

Probably the easiest way is to disable everything except "Windows" in IIS

edited Jul 13, 2020 at 13:18

answered Aug 30, 2018 at 14:53

ste-fu

7,5273 gold badges31 silver badges51 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

geraphl · Accepted Answer · 2019-05-18 19:16:46Z

0

As mentioned here if you want to allow users to request anonymous and others with windows authentication, your best way is to present two different sub-paths for each AuthenticationScheme for example define a route for anonymous request like /anonymous/{controller}/{action} and one for windows authentication requests /windows/{controller}/{action}. Therefor you don't have to double implement the controller, but the drawback is that you have to run two connections for the same module.

answered May 18, 2019 at 19:16

geraphl

3154 silver badges11 bronze badges

Collectives™ on Stack Overflow

c# .net Web Api Windows and Anonymous Authentication get current user

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related