Middlaware authentication for Web Api allowanonymous method

I have a middle ware class as below and expecting token for allow-anonymous method. Can some suggest me what am i missing over here.

Middleware class as follows :

namespace filetrs
{
public class TestingAuthenticationFilter : IAuthenticationFilter
{
public async Task AuthenticateAsync(HttpAuthenticationContext context, CancellationToken cancellationToken)
{
var alias = GetAliasFromJwt(context.Request.Headers.Authorization.ToString());
await Task.Yield();
}
public Task ChallengeAsync(HttpAuthenticationChallengeContext context, CancellationToken cancellationToken)
{
return Task.CompletedTask;
}
public static string GetAliasFromJwt(string jwt)
{
string alias, extractedToken;
alias = extractedToken = string.Empty; string tokenTypeToRemove = "Bearer ";
if (tokenTypeToRemove.Length > 0)
{
extractedToken = jwt.Substring(tokenTypeToRemove.Length);
var handler = new JwtSecurityTokenHandler();
var jwtSecurityToken = handler.ReadToken(extractedToken) as JwtSecurityToken;
alias = jwtSecurityToken.Claims.First(claim => claim.Type == "abc").Value.Split('@').First();
}
return alias;
}
}

Please find APi class as well

ConfigAuth method from startup.cs as follows

public void ConfigureAuth(IAppBuilder app)
{
app.UseWindowsAzureActiveDirectoryBearerAuthentication
( new WindowsAzureActiveDirectoryBearerAuthenticationOptions
{ Tenant = tenant, TokenValidationParameters = new TokenValidationParameters { ValidAudience = clientId }
});

I am unable to find the solution. Please someone help me on this?

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

Naruto Reddy6y ago
@Thakkur,

I have applied it already on controoller, my question is that "For authentication middleware expecting a token for Allowanynomous class".
how can we solve this.
Jenith Thakkar6y ago
Have you applied attributes above the api methods like
[Authorize]