https://anuraj.dev/blog/implementing-basic-authentication-in-minimal-webapi/

[giscus[bot]]

https://anuraj.dev/blog/implementing-basic-authentication-in-minimal-webapi/

This post is about how implement basic authentication in ASP.NET Core Minimal API. Few days back I got a question / comment in the blog post about Minimal APIs - about implementing Basic authentication in Minimal APIs. Since the Action Filters support is not available in Minimal API I had to find some alternative approach for the implementation. I already wrote two blog posts Basic authentication middleware for ASP.NET 5 and Basic HTTP authentication in ASP.Net Web API on implementing Basic authentication. In this post I am implementing an AuthenticationHandler and using this for implementing basic authentication. As I already explained enough about the concepts, I am not discussing them again in this post.

https://anuraj.dev/blog/implementing-basic-authentication-in-minimal-webapi/

[tasneemoh]

Well,
this is fine but I tested it on postman, when UnAuthorized returned, the response return the body of controller.
How can I stop run controller response?

[anuraj]

Hope you added all the code snippets, like AddAuthorization and all. For me, it is working as expected. I used the same code and updated it to .NET 8. And here is the screenshot.

JSON response is empty since it is unauthorized - as expected.

[asos-alexhaigh]

ISytemClock is obsolete now and the AuthenticationHandler is deprecated.

There should be a way of doing this using C#8 functions but it's not obvious probably wasn't a big focus because Basic Auth isn't very secure compared to other methods.