CODEWITHSUNDEEP
c#authenticationwindows-identity
Christian St.
Christian St.

Reputation: 1911

How to trigger Windows for user credentials prompt?

I'm looking for an idea/solution that works on both Windows 8.1 and Windows 10.

For critical actions in my WPF application I want the user to explicitly authenticate again against the operating system. On the web exist many custom solutions like NuGet packages that look like a Windows prompt that asks the user for the password. Like the one that shows up, if you try to access network shares you are not authenticated for.

I do not want to use those custom solutions, I want to use those provided by operating system, if any.

In detail I'm looking for something like that:

WindowsIdentity identity = WindowsIdentity.GetCurrent();
bool authenticated = [WindowsAPI].Authenticate(identity);
if(authenticated)
{
    //do critical action
}

Does such a WindowsAPI exist?

EDIT: The WindowsAPI should have an own UI and, in best case, validates the credentials and does not store any.

Upvotes: 3

Views: 2709

Answers (2)

Christian St.
Christian St.

Reputation: 1911

The overall answer is: No, there does not exist a Windows API that includes an own UI and additionally validates the entered credentials.

In short, I used CredUIPromptForWindowsCredentials that pops up a configurable operation system dialog to enter credentials, CredUnPackAuthenticationBuffer to unpack credentials and LogonUser to verify the unpacked credentials. At the end clear the memory allocated by CredUIPromptForWindowsCredentials using CoTaskMemFree.

MS Docs:

P/Invoke Docs:

Upvotes: 0

oleksa
oleksa

Reputation: 4037

bool authenticated = [WindowsAPI].Authenticate(identity); Should it ask user to enter the login and password one more time?

You can try to use Windows API LogonUser. However it does not supply UI to collect user name and password. You can try to create a dialog form with two textboxes by your own.

There is IPublicClientApplication and AcquireToken* methods. Please check the AcquireTokenByIntegratedWindowsAuth. However it works with AzureAD to get the token so I'm not sure does it fit to your requirements.

Upvotes: 1

Related Questions