mihirdilip / aspnetcore-authentication-basic Goto Github PK

Hello, excuse me, now I want to implement a function, that is, when the browser accesses the interface, the pop-up window to enter the account password, if the input error page will display a custom error message.
First of all, you can use a browser pop-up, OnValidateCredentials, to enter your account or password, but if you enter the wrong password, you'll see this:
First of all, I found that your "OnHandleChallenge" method did what I wanted, which is for the page to return custom information:

I then tried to mimic the OnHandleChallenge method in the "OnValidateCredentials" method, returning an error message when it failed:

After I entered the wrong account password, the effect was not what I thought, he did not return the custom data, but returned the browser error message:

So I'm trying to use, in combination with the "OnHandleChallenge" and "OnValidateCredentials" methods to get what I want. However, I found that when the two are used together, accessing the interface does not trigger a browser pop-up, but directly returns a custom message for the "OnHandleChallenge" method, so is there a way to combine the effects of the two?

In the description it is said that the package can be used fro .Net core, but in details it is said that .NET Framework 4.6.1 is also supported. Please keep the title and content consistent.

Please add an example how to use with .Net framework 4.6.1.

Also fix the phrase “ Always use HTTPS (SSL Certificate) protocol in production when using API Key authentication.” as this repo is about basic authentication.

expect http digest schemal

Just wanted to say thank you. This is very tidy implementation of the basic implementation that works flawlessly.

Code in question:

Problem:

The log statement at line 56 breaks the promise to ignore authentication if the endpoint is annotated with [AllowAnonymous].

Expected behavior:

When querying an endpoint annotated with [AllowAnonymous], authentication logic should be ignored.

Actual behavior:

When querying an endpoint annotated with [AllowAnonymous], two lines of log output are produced, stating that nothing is going on. (logspam)

Example:

info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.
info: AspNetCore.Authentication.Basic.BasicHandler[0]
No 'Authorization' header found in the request.

Pull request:

#8