Web API Request - Send back authentication request

Question

I am using the new MVC 4 Beta Web API. I want to add an [Authorize] attribute to the Get action in order to have the user authenticate themselves before getting data from the server. I am using fiddler to test the action, but it is redirecting me to the Login Url that is defined in the web.config. I am using [System.Web.Http.Authorize] to add the [Authorize] attribute.

Darin Dimitrov · Accepted Answer · 2012-03-13 06:56:35Z

1

The reason for this happening is because the Forms Authentication module hijacks the 401 HTTP status code returned by the Web API and redirects to the Login page. You may take a look at the following blog post in which Phil Haack talks about how to configure ASP.NET to prevent it from doing this for AJAX requests. You could slightly modify his code so that it does this for all requests, or only for requests for your Api controllers.

answered Mar 13, 2012 at 6:56

Darin Dimitrov

1.0m277 gold badges3.3k silver badges3k bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

bdparrish Over a year ago

after installing this solution through NuGet I was still sent to the Login Redirect Url, but instead of a 200 that shows the Login I was receiving an error saying it could not find the controller after the redirect.

Antony Scott · Accepted Answer · 2012-09-03 08:56:11Z

0

To get it working in my API I just removed the authentication section from web.config and wrote (well converted from my WCF WebApi code) a message handler. I've put what I did in to a blog post.

edited Sep 3, 2012 at 8:56

answered Mar 13, 2012 at 19:58

Antony Scott

22.1k12 gold badges64 silver badges95 bronze badges

Collectives™ on Stack Overflow

Web API Request - Send back authentication request

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related