c# - Passing user identity from MVC to Web Api -


i have mvc application using windows auth consumes web api service. both hosted within same domain sat on different servers (mvc publicly accessible). lets suppose web api service has method "createfoobar" requires user in particular ad group. @ mvc layer can check user indeed in group, package json message , call "createfoobar". how service perform such check? how can tell user has made request?

initial thought add userid json message , let service method retrieve details allow pass in userid won't work. can point me in right direction please?

you should use kerberos delegation. user authenticated in mvc application using kerberos kerberos token passed web api call.

we @ work pass credentials asp.net app exchange webserver. works fine.

if want more info check kb: http://support.microsoft.com/kb/810572


Comments

Popular posts from this blog

How to remove text and logo OR add Overflow on Android ActionBar using AppCompat on API 8? -

html - How to style widget with post count different than without post count -

url rewriting - How to redirect a http POST with urlrewritefilter -