使用Windows身份验证的OWIN / Katana WebAPI不断要求登录/密码

Question

I have an OWIN/Katana WebAPI that is using Windows Authentication. When I run it locally, it's able to take in my windows credentials. However, when I deploy the WebAPI to a server/cluster, it keeps prompting me for my login and password.

I currently have the following in the Startup.cs:

  //Set up integrated windows authentication.
  HttpListener listener = (HttpListener)appBuilder.Properties["System.Net.HttpListener"];
  listener.AuthenticationSchemes = AuthenticationSchemes.IntegratedWindowsAuthentication;

I even tried this as well:

  HttpListener listener = (HttpListener)appBuilder.Properties["System.Net.HttpListener"];
  listener.AuthenticationSchemes = AuthenticationSchemes.Negotiate;

In Fiddler, I was able to hit my API (on the server) by Enabling Authentication. But if I consume the API from another application, it automatically comes back with a 401 Unauthorized. Why is it still prompting a manual login even when I specifically made it Windows Authentication?

I've been following these articles:

http://www.sbrickey.com/Tech/Blog/Post/AllowAnonymous_for_OWIN_Katana_self_hosted_WebAPIs_using_Kerberos

https://blogs.msdn.microsoft.com/chiranth/2013/09/20/ntlm-want-to-know-how-it-works/

https://docs.microsoft.com/en-us/aspnet/aspnet/overview/owin-and-katana/enabling-windows-authentication-in-katana

Answer 1

I found out why my web client is failing (thanks to @LexLi). I thought the issue was in my API but it turns out that I wasn't even sending my user credentials from the client. I added the user credentials into the HttpHandler for my HttpClient and it worked.

new HttpClient(new HttpClientHandler() { UseDefaultCredentials = true })