running asp.net intranet application on localhost asking for authentication

Question

running asp.net intranet application on localhost asking for authentication

Anjali Agarwal 1,531

I have an intranet application written int ASP.net core, when I run this application on localhost, I get a pop window asking me to authenticate and once I enter my domain name\my username and password then it authenticates me and lets me run the application. Basically, I enter my Windows username and password and then I can see the application. Below is the screen of what I am getting:

User's image

this is what I tried:

went to the folder where the application resides
right click on it and click on the properties
properties->Security tab and gave full control to myself. Below is the screenshot:

User's image

This is what I have in web.config file:

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <location path="." inheritInChildApplications="false">
    <system.webServer>
      <security>
        <authentication>
          <anonymousAuthentication enabled="false" />
          <windowsAuthentication enabled="true" />
        </authentication>
      </security>
    </system.webServer>
  </location>
  <runtime>
 
  </runtime>
</configuration>

Since this is happening in localhost. Below is the screenshot of IIS express settings:

User's image

any help will be greatly appreciated.

Anonymous

2024-05-07T02:35:43.61+00:00

Could you please tell me how you host your application inside the IIS or else? Did you enable the windows authentication inside the program.cs? Like this builder.Services.AddAuthentication(NegotiateDefaults.AuthenticationScheme) .AddNegotiate();

Anjali Agarwal 1,531

Hi @Anonymous ,

This is slightly old application so I have stratup.cs in my application. Below is the code of the startup.cs. I also modified my original questions showing my web.config file and IISExpress settings screenshot:

public class Startup
 {
     public IConfiguration Configuration { get; }
     private const string DefaultConnection = "DefaultConnection";
     public Startup(IConfiguration configuration)
     {
         Configuration = configuration;
     }
     public void ConfigureServices(IServiceCollection services)
     {
         services.AddDbContext<AckPackage.Data.AckContext>(options =>
             options.UseSqlServer(
                 Configuration.GetConnectionString(DefaultConnection)));
         services.Configure<CookiePolicyOptions>(options =>
         {
             // This lambda determines whether user consent for non-essential cookies is needed for a given request.
             options.CheckConsentNeeded = context => true;
             options.MinimumSameSitePolicy = SameSiteMode.None;
         });
         //services.AddAuthentication(options =>
         //{
         //    options.DefaultAuthenticateScheme = IISDefaults.AuthenticationScheme;
         //    options.DefaultChallengeScheme = IISDefaults.AuthenticationScheme;
         //});
         services.AddAuthentication(NegotiateDefaults.AuthenticationScheme)
           .AddNegotiate();
         services.AddAuthorization(options =>
         {
             options.FallbackPolicy = options.DefaultPolicy;
         });
         services.AddHttpContextAccessor();
         services.AddControllersWithViews();
         services.AddSingleton<IHttpContextAccessor, HttpContextAccessor>();
         services.AddDistributedMemoryCache();
         services.AddSession(options =>
         {
             options.IdleTimeout = TimeSpan.FromSeconds(120);
             options.Cookie.HttpOnly = true;
             options.Cookie.IsEssential = true;
         });
         services.AddRazorPages();
         //services.AddMvc().AddRazorRuntimeCompilation();
         services.BindingAppServices(Configuration);
         services.Configure<Microsoft.AspNetCore.Http.Features.FormOptions>(x =>
         {
             x.ValueLengthLimit = int.MaxValue;
             x.MultipartBodyLengthLimit = int.MaxValue; // In case of multipart
         });
     }
     public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
     {
         if (env.IsDevelopment())
         {
             app.UseDeveloperExceptionPage();
         }
         else
         {
             app.UseExceptionHandler("/Home/Error");
             // The default HSTS value is 30 days.
             app.UseHsts();
         }
         app.UseHttpsRedirection();
         app.UseStaticFiles();
         app.UseRouting();
         app.UseAuthentication();
         app.UseAuthorization();
         app.UseSession();
         app.UseEndpoints(endpoints =>
         {
             endpoints.MapControllerRoute(
                 name: "default",
                 pattern: "{controller=Employee}/{action=Create}/{id?}");
             endpoints.MapRazorPages();
         });
         // app.MapRazorPages();
     }

2 answers

Your answer

Anonymous

2024-05-07T02:35:43.61+00:00

Could you please tell me how you host your application inside the IIS or else? Did you enable the windows authentication inside the program.cs? Like this builder.Services.AddAuthentication(NegotiateDefaults.AuthenticationScheme) .AddNegotiate();

Answer 1

SurferOnWww 4,631

Probably Basic Authentication is enabled and Anonymous Authentication is disabled. If you use IIS or IIS Express check the Authentication settings of the site.

enter image description here

Anjali Agarwal 1,531 Reputation points

2024-05-07T05:20:52.19+00:00

This is in localhost. I havent published the code yet.
SurferOnWww 4,631 Reputation points

2024-05-07T05:32:36.4466667+00:00

This is in localhost. I havent published the code yet.

It does not matter. I understand that you use IIS Express. According to the code of web.config file you added to your question, Windows Authentication is enabled and Anonymous Authentication is disabled. That is why.
Anjali Agarwal 1,531 Reputation points

2024-05-07T05:33:26.48+00:00

Hi @SurferOnWww ,

I added more details in my question. This is only happening in my localhost. I added the web.config file and also, IISExpress settings in my original question.
Anjali Agarwal 1,531 Reputation points

2024-05-07T05:36:09.9066667+00:00

Hi @SurferOnWww ,

so are you saying, I should disable windows authentication and enable anonymous authentication?
SurferOnWww 4,631 Reputation points

2024-05-07T05:58:37.9766667+00:00

so are you saying, I should disable windows authentication and enable anonymous authentication?

Yes. Please try and let me know the result.
Anjali Agarwal 1,531 Reputation points

2024-05-07T06:00:18.0633333+00:00

Hi @SurferOnWww ,

This is an intranet application. I cannot enable anonymous authentication.
SurferOnWww 4,631 Reputation points

2024-05-07T06:32:26.12+00:00

I don't understand your issue.
Anjali Agarwal 1,531 Reputation points

2024-05-07T06:42:40.1266667+00:00

Hi @SurferOnWww ,

This application is an intranet application. This is not a public facing application. I am getting employees name from active directory in this application and displaying those names. In order to do that, I need windows authentication.
SurferOnWww 4,631 Reputation points

2024-05-07T07:15:41.7566667+00:00

I still don't understand your issue. Are you saying that the windows authentication is indispensable but user does not want to login every time he accesses the web site? If so and the web server and all users belong to active directory domain environment, why don't use the integrated windows authentication and enable the single sign on?
Anjali Agarwal 1,531 Reputation points

2024-05-07T16:10:23.67+00:00

Hi @SurferOnWww ,

Yes, user does not want to login every time when he access the web site. I am using authentication and have single sign on. Still, I am prompted for those credentials.
SurferOnWww 4,631 Reputation points

2024-05-08T00:33:05.18+00:00

It seems to me that the integrated windows authentication is not working properly due to setting issue in your environment. I cannot help.

Answer 2

Anonymous

Hi @Anjali Agarwal,

According to your screenshot, you could find you have enabled the windows authentication inside your application.

You have enabled both using the web.config(IIS express) and your startup.cs.

If you don't want to use windows authentication, you set the web.config as below and remove the related codes inside the startup.cs:

 
<configuration> 
<location path="." inheritInChildApplications="false"> 
<system.webServer> 
<security> 
<authentication>
 <anonymousAuthentication enabled="true" /> 
<windowsAuthentication enabled="false" /> 
</authentication> 
</security> 
</system.webServer> 
</location>
 <runtime>
 </runtime> 
</configuration>

Remove below line:

services.AddAuthentication(NegotiateDefaults.AuthenticationScheme) .AddNegotiate();

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Anjali Agarwal 1,531 Reputation points

2024-05-07T16:11:38.88+00:00

Hi @Anonymous

I want to use windows authetication.
Anonymous

2024-05-08T02:48:42.27+00:00

OK, do you mean you still want to use windows auth , but you don't want that popup? If this is your requirement, you need check your edge settings to make sure you have enabled automatically logon with current username and password in internet options.
Anjali Agarwal 1,531 Reputation points

2024-05-08T22:15:23.99+00:00

Hi @Anonymous ,

The image that you sent me might work, but my networking team is not letting me do this. is there any workaround on the coding side?
Anjali Agarwal 1,531 Reputation points

2024-05-08T23:02:27.55+00:00

Hi @Anonymous ,

I found the above image settings in control panel. My networking team is saying, I am not allowed to change this settings in control panel. Can I change it in chrome or Edge. Can you show me the screen shot of changing it in chrome or edge.
Anonymous

2024-05-09T02:00:02.21+00:00

Yes, you could directly search it inside the edge settings, and select it like below:
Anjali Agarwal 1,531 Reputation points

2024-05-09T04:45:50.13+00:00

Hi @Anonymous ,

Thanks for your help! I found the setting, but I cannot change it because of my organization's policy. Can I code something in startup.cs or program.cs file so that I am authenticated right away? I pasted my entire startup.cs file in my original question.
Anonymous

2024-05-10T01:44:37.0966667+00:00

Hi @Anjali Agarwal,

This is windows authentication which is based on the system, the .net core is just use it, the only way is what I suggested let the browser auto login in, one possible way is inside the development environment you don't use windows auth and enable it inside the production environment by modifying the web.config or using if (env.IsDevelopment()).

Anjali Agarwal 1,531

Hi @Anonymous ,

How can I do the browser auto log in? This is what I have in LaunchSettngs.cs:

{
  "profiles": {
    "EmployeeRatings": {
      "commandName": "Project",
      "launchBrowser": true,
      "environmentVariables": {
        "ASPNETCORE_ENVIRONMENT": "Development"
      },
      "applicationUrl": "https://localhost:56103;http://localhost:56104"
    }
  }
}

or how can I alter the web.config file:

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <!--
    Configure your application settings in appsettings.json. Learn more at http://go.microsoft.com/fwlink/?LinkId=786380
  -->
  <system.webServer>
    <handlers>
      <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModuleV2" resourceType="Unspecified" />
    </handlers>
    <aspNetCore processPath="%LAUNCHER_PATH%" arguments="%LAUNCHER_ARGS%" stdoutLogEnabled="false" stdoutLogFile=".\logs\stdout" forwardWindowsAuthToken="false" hostingModel="InProcess">
      <environmentVariables>
        <environmentVariable name="ASPNETCORE_HTTPS_PORT" value="44310" />
        <environmentVariable name="ASPNETCORE_ENVIRONMENT" value="Development" />
      </environmentVariables>
    </aspNetCore>
  </system.webServer>
</configuration>

if you can tell me the exact code. I will go with auto log in. Auto login in web browser will resolve my issue. but not sure how can I do this.

Anonymous

2024-05-13T01:38:59.7966667+00:00

The only way to let you automatically login in windows auth is modifying the edge permission. Modifying the codes couldn't help you automatically login in windows auth. My suggestion is not use windows auth during the development environment, but it seems you must test with it. Please contract your IT admin to allow you modify the edge settings, there is no code could achieve your requirement.

Share via

running asp.net intranet application on localhost asking for authentication

2 answers

Your answer