search

Sustainsys / Saml2

Saml2 Authentication services for ASP.NET
Other
962 stars 603 forks source link

WebAPI support #96

Closed henningjensen closed 9 years ago

henningjensen commented 10 years ago

Hi!

I'd like to use this library together with the ASP Web API framework. I'm building a javascript client using Web API controllers as backend.

Currently the System.Web.Http.AuthorizeAttribute doesn't work like System.Web.Mvc.AuthorizeAttribute. I only get a HTTP 401 - Unauthorized. I need to get 303 together with the authentication url.

Is it much work to get support for Web API? I might get some time to do this myself if you can point me in the right direction.

AndersAbel commented 10 years ago

I have no real experience myself with Web API, but as far as I've understood it is using Owin, which means that #40 should make AuthServices work with Owin.

Since WebAPI is an API there might be additional challenges, if called from e.g. a single plage application you will run into cross-domain issues when the API answers with a redirect.

AndersAbel commented 10 years ago

@henningjensen Have you seen that there now is an Owin middleware available? Do you know if it is possible to use with Web API?

henningjensen commented 10 years ago

Haven't had the time to test it yet. On my current project we are looking into OpenID Connect instead of SAML, so that we can easily support third party apps and access tokens.