CODEWITHSUNDEEP
asp.net-coredigest-authenticationkestrel-http-server
Albireo
Albireo

Reputation: 11095

Digest authentication in ASP.NET Core / Kestrel

Is it possible to use digest authentication in ASP.NET Core / Kestrel? If it is, how do I enable and use it?

I know that basic authentication is not and will not be implemented because it's considered insecure and slow, but I can't find anything at all about digest.

I don't want to use IIS' authentication because I don't want to be tied to Windows accounts, I want use a custom credentials validation logic.

Upvotes: 12

Views: 3345

Answers (3)

Aleksey Rudenko
Aleksey Rudenko

Reputation: 21

If someone is looking for the answer. This code is working for me:

using System.ServiceModel;

var binding = new BasicHttpBinding();
binding.Security.Transport.ClientCredentialType = HttpClientCredentialType.Digest;
binding.TextEncoding = Encoding.UTF8;
binding.TransferMode = TransferMode.Buffered;
binding.AllowCookies = false;
binding.Security.Mode = BasicHttpSecurityMode.TransportCredentialOnly;

var endpoint = new EndpointAddress(new Uri("http://website.domain/WebService.svc"));
var client = new MessageServiceClient(binding, endpoint);
client.ClientCredentials.HttpDigest.ClientCredential.UserName = "username";
client.ClientCredentials.HttpDigest.ClientCredential.Password = "password";

var response = client.CallMethod();

Upvotes: 0

Tratcher
Tratcher

Reputation: 6084

The only implementation of digest auth currently available with Core is the one in IIS that's tied to integrated windows auth.

Upvotes: 5

Dawid Rutkowski
Dawid Rutkowski

Reputation: 2756

Few thing about Kestrel, WebListener servers and authentication

And example how you can allow anonymous users using WebListener:

builder.UseWebListener(options =>
{    
     options.Listener.AuthenticationManager.AuthenticationSchemes = AuthenticationSchemes.AllowAnonymous;
});

Upvotes: -4

Related Questions