DigestAuthenticationHandler

[Steve0212a]

Do you have an example of using DigestAuthenticationHandler with Minimal Api?

https://learn.microsoft.com/en-us/aspnet/core/tutorials/min-web-api?view=aspnetcore-8.0&tabs=visual-studio

[gimlichael]

Hi @Steve0212a,

Sorry for the late reply - I first discovered this post yeserday.

I did a quick-n-dirty enrollment of a new ASP.NET Core Web API and here is the basic boiler plate:

using System.Security.Claims;
using Codebelt.Bootstrapper.Web;
using Cuemon.AspNetCore.Authentication.Digest;
using Cuemon.Collections.Generic;
using Cuemon.Extensions.AspNetCore.Authentication;
using Microsoft.AspNetCore.Authorization;

namespace WebApplication
{
    public class Program : MinimalWebProgram
    {
        public static void Main(string[] args)
        {
            var builder = CreateHostBuilder(args);

            builder.Services.AddAuthentication(DigestAuthorizationHeader.Scheme)
                .AddDigestAccess(o =>
                {
                    o.RequireSecureConnection = false;
                    o.Authenticator = (string username, out string password) =>
                    {
                        if (username == "Agent")
                        {
                            password = "Test";
                            return new ClaimsPrincipal(new ClaimsIdentity(Arguments.Yield(new Claim(ClaimTypes.Name, "Test Agent")), DigestAuthorizationHeader.Scheme));
                        }
                        password = null;
                        return null;
                    };
                });

            builder.Services.AddAuthorization(o =>
            {
                o.FallbackPolicy = new AuthorizationPolicyBuilder()
                    .AddAuthenticationSchemes(DigestAuthorizationHeader.Scheme)
                    .RequireAuthenticatedUser()
                    .Build();

            });

            builder.Services.AddRouting();

            // Learn more about configuring Swagger/OpenAPI at https://aka.ms/aspnetcore/swashbuckle
            builder.Services.AddEndpointsApiExplorer();
            builder.Services.AddSwaggerGen();

            var app = builder.Build();

            // Configure the HTTP request pipeline.
            if (app.Environment.IsDevelopment())
            {
                app.UseSwagger();
                app.UseSwaggerUI();
            }

            app.UseHttpsRedirection();

            app.UseAuthentication();
            app.UseAuthorization();

            var summaries = new[]
            {
                "Freezing", "Bracing", "Chilly", "Cool", "Mild", "Warm", "Balmy", "Hot", "Sweltering", "Scorching"
            };

            app.MapGet("/weatherforecast", (HttpContext httpContext) =>
            {
                var forecast = Enumerable.Range(1, 5).Select(index =>
                    new WeatherForecast
                    {
                        Date = DateOnly.FromDateTime(DateTime.Now.AddDays(index)),
                        TemperatureC = Random.Shared.Next(-20, 55),
                        Summary = summaries[Random.Shared.Next(summaries.Length)]
                    })
                    .ToArray();
                return forecast;
            })
            .WithName("GetWeatherForecast")
            .WithOpenApi();

            app.Run();
        }
    }
}

Happy coding!

[Steve0212a]

Thanks