Windows Authentication and JWT Bearer on ASP.Net Core Web API

[fabricejumarie]

Hello,

I try to use the both authentication scheme JwtBearerDefaults.AuthenticationScheme and Windows authentication. The user log in by calling an authentication controller which required Windows Authentication, the windows user's name is retrieved from http request and validated from database by using Identity framework. If the user is validated, a JWT is generated and send to the client and next I would like that the user navigation use only this JWT to access protected data.

So that IIS accepts incoming HTTP request with JWT , I enable Anonymous authentication in addition to Windows Authentication.

Now I would like to force Windows Authentication on authentication controller and use JWT bearer for all other controllers.

Does anyone can help me for that, I try so many thing but without success?

I commited my code here : https://github.com/fabricejumarie/Authentication_WebApiCore2

[Eilon]

@Tratcher - can you provide some info on how to do this?

[Tratcher]

You can set [Authorize(IISDefaults.AuthenticationScheme)] on your auth controller and [Authorize] on the others. Then HttpContext.User should be the one you expect.

[Eilon]

Closing because no further action is planned here.

[brahmb]

Hallo Eilon and Tratcher - Refer
fabricejumarie/Authentication_WebApiCore2#1

There suggesting of using [Authorize(IISDefaults.AuthenticationScheme)] did not work so I had to use an alternative plan. This pull request has a working copy of the code now.

[intrico]

@Tratcher [Authorize(IISDefaults.AuthenticationScheme)] does not even compile.