CODEWITHSUNDEEP
c#asp.netasp.net-mvc
artemka
artemka

Reputation: 59

Request.IsAuthenticated is always True

Every HttpRequest to any page in the Asp.net App is somehow authenticated. I check it by printing the debug information in the view:

<p>Request.IsAuthenticated: <%= Request.IsAuthenticated %></p>

Authentification mode for the project is set to "Windows" in Web.config:

<authentication mode="Windows" />

Even simple HTTP request without cookies turns out to be authenticated.

What is the cause of this behavior? Did I miss some setting in Web.config?

Upvotes: 1

Views: 2454

Answers (1)

Donal
Donal

Reputation: 32713

The browser uses Windows Integrated Authentication - which means it automatically logs the user in using their windows credentials - without asking.

If you set <authentication mode="Windows" /> it is going to log the user in with their Windows credentials automatically.

For more information, see here.

Upvotes: 1

Related Questions