Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Authorization Scheme Issue
#1
Hello everyone,

I'm using my IntraWeb application as a web server, but at the moment it only works when using the Basic Authorization scheme.
Could you please advise me on how to configure it to accept another authorization scheme (for example, Bearer)?

Thank you in advance for your help!
Best regards,
Robert
Reply
#2
Hi Robert, IntraWeb’s built-in authentication is pretty tightly coupled to Basic auth, so there isn’t a simple switch to enable Bearer out of the box. The usual approach is to disable IntraWeb’s authentication and handle it yourself at the request level. You can read the Authorization header in an OnBeforeDispatch or OnRequest event, parse the Bearer token manually, validate it, and then decide whether to allow the request to continue. That way you’re free to support Bearer, JWT, or even multiple schemes at once, while still using IntraWeb as the web server.
Reply
#3
Hi Robert,

We have a pretty good integration with OAuth2 servers out of the box and it's pretty simple to add some other integration. Some, not all, "bearer authentication" mechanisms involve OAuth2 framework.

However, if you are runing your own authentication mechanism based on bearer tokens, IW won't handle it out of the box but, as @ariambfgej said above, it's not very hard to handle.

Can you give more details on how this will work?
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)