Merge pull request #373 from GridProtectionAlliance/anon-noauth

Ensure the anonymous principal is not authenticated
GridProtectionAlliance · Feb 13, 2025 · 5e75700 · 5e75700
2 parents e7a8d3d + 9e90555
commit 5e75700
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/Source/Libraries/GSF.Web/Security/AuthenticationHandler.cs b/Source/Libraries/GSF.Web/Security/AuthenticationHandler.cs
@@ -33,6 +33,7 @@
 using System.Net;
 using System.Net.Http.Headers;
 using System.Runtime.CompilerServices;
+using System.Security.Claims;
 using System.Security.Principal;
 using System.Text;
 using System.Threading.Tasks;
@@ -109,8 +110,9 @@ private IPrincipal AnonymousPrincipal
         {
             get
             {
-                IIdentity anonymousIdentity = new GenericIdentity("anonymous");
-                return new GenericPrincipal(anonymousIdentity, Array.Empty<string>());
+                Claim name = new(ClaimTypes.Name, "anonymous");
+                IIdentity anonymousIdentity = new ClaimsIdentity([name]);
+                return new ClaimsPrincipal(anonymousIdentity);
             }
         }