经过身份验证的用户在 web api owin 中间件中丢失

Question

我正在使用Jwt Bearer Aurhentication owin middleware和Jwt Bearer Aurhentication以及Autofac来帮助我的Webapi处理请求。

JwtBearerAuthentication中间件工作正常并将HttpContext.Current.User.Identity.IsAuthenticated设置为true并持续到管道到达webapi middleware ，在我的webapi身份验证用户丢失

中间件的顺序如下：

public void Configuration(IAppBuilder app)
{

    var config = new HttpConfiguration();
    WebApiConfig.Register(config);
    #region Autofac config

    var container = AutofacWebapiConfig.Initialize(GlobalConfiguration.Configuration);
    config.DependencyResolver = new AutofacWebApiDependencyResolver(container);

    #endregion
    #region RoutConfig

    RouteConfig.RegisterRoutes(RouteTable.Routes);

    #endregion

    //Register middlewares
    app.UseAutofacMiddleware(container);
    app.UseAutofacWebApi(config);
    app.UseCors(Microsoft.Owin.Cors.CorsOptions.AllowAll);
    app.UseJwtBearerAuthentication(new MyJwtAuthenticationOptions());
    app.Use<RedirectUnAuthenticateRequestsMiddleware>();
    app.Use<ReadBodyMiddleware>();
    app.UseWebApi(config); //in this middleware authenticated user is lost

}

这是我的 WebApiConfig 类：

    public static void Register(HttpConfiguration config)
    {
        // Owin auth
        config.SuppressDefaultHostAuthentication();
        config.Filters.Add(new HostAuthenticationFilter("Signature"));
        GlobalConfiguration.Configuration.IncludeErrorDetailPolicy =
IncludeErrorDetailPolicy.Always;
        // Web API routes
        config.EnableCors(new EnableCorsAttribute("*", "*", "*"));
        config.MapHttpAttributeRoutes();
        config.Services.Insert(typeof(ModelBinderProvider), 0,
         new SimpleModelBinderProvider(typeof(DocumentModel), new FromFormDataBinding()));
        config.Routes.MapHttpRoute(
            name: "DefaultApi",
            routeTemplate: "{controller}/{action}/{id}",
            defaults: new { id = RouteParameter.Optional }
        );
    }
}

你有什么想法吗？

Update:

在身份验证中间件之后的我的IsAuthenticated中间件中， IsAuthenticated设置为 true

  public override async Task Invoke(IOwinContext context)
{
      var isAuth=context.Request.User.Identity.IsAuthenticated;//It is true as expected.
                await Next.Invoke(context);
                return;
}

但是当它到达我的控制器时

HttpContext.Current.User.Identity.IsAuthenticated;//It is false.

Answer 1

问题来自WebApiConfig类中的这一行；

config.SuppressDefaultHostAuthentication();

当我发表评论时，问题消失了，经过身份验证的用户仍然存在于 webapi 中。