antony_scott - Latest Comments

Re: Using Hg convert to move projects between repositories

Antony Scott — Thu, 09 Aug 2012 08:07:33 -0000

I used this "technique" again today, but I tried pulling one project over at a time and for whatever reason it didn't do anything the second time. So, I just started again and put both projects in my filemap.txt

Re: Tooltips on disabled buttons

neminem — Wed, 20 Jun 2012 16:19:13 -0000

It did indeed! I found a number of gross, complicated ways to get disabled UI objects to display their tooltips, before I found this - still gross, perhaps, given it uses a pinvoke, but we use loads of pinvoke calls already, and at least it's simple and obvious what it's doing.

Re: Standing up to work: Day 3

Sue — Wed, 13 Jun 2012 15:06:48 -0000

ha ha - off to run an errand aka picking up your son from nursery and running the gauntlet home with the scooter!!!

Re: ASP.NET Web Api Basic Authentication

Kralizek — Fri, 08 Jun 2012 08:11:36 -0000

with MVC4 RC Microsoft changed how the authentication token is handled.

By disassembling the System.Web.Http.AuthorizeAttribute, I found that I had to change line 24 of the posted code to something similar to this:
Thread.CurrentPrincipal = new GenericPrincipal(identity, new string[0]);

Re: ASP.NET Web Api Basic Authentication

Clint Chapman — Thu, 17 May 2012 14:24:40 -0000

Antony, thanks for the code - I can't believe there isn't a built-in solution for this with webapi.

One thing others might find useful though is to enable Roles with the Authorize attribute just change

request.Properties.Add(HttpPropertyKeys.UserPrincipalKey, new GenericPrincipal(identity, new string[0]));

request.Properties.Add(HttpPropertyKeys.UserPrincipalKey, new GenericPrincipal(identity, Roles.GetRolesForUser(credentials.Username)));

I also had to remove the existing UserPrincipalKey property before I could add the new one (not sure why that was).

Thanks again,
Clint

Re: ASP.NET Web Api Validation with Data Annotations

Antony Scott — Tue, 01 May 2012 15:01:05 -0000

Sorry, it's a bit difficult to say without more information. I suggest you ask a question on stackoverflow giving as much information as you can.

Re: ASP.NET Web Api Validation with Data Annotations

Anuj Pandey — Tue, 01 May 2012 07:28:28 -0000

while trying to access this set of api with using php cURL it returns likes this
{ToEmailAddress: [ ]}

Any Ideas why ? for the following code.

$result=json_encode($web->api('TellAFriend', array(
'ToName'=>'John Doe',
'ToEmailAddress'=>'wrongemailaddreess"
)));
echo($result);

Re: ASP.NET Web Api Basic Authentication

Antony Scott — Mon, 23 Apr 2012 09:46:11 -0000

that's a very good question!

tbh, I am not sure how to get that functionality. I would be very interested to find out though. It sounds like a stackoverflow question in the making ;)

Re: ASP.NET Web Api Basic Authentication

John — Mon, 23 Apr 2012 09:41:41 -0000

Alright, now I got it to run. But it gets invoked even if there is no [Authorize] attribute on the called action. How would I got about to make this messagehandler only run for actions with the [Authorize] attribute? Or would I need to implement my own
AuthorizationFilterAttribute to be able to get that kind of control?

Re: ASP.NET Web Api Basic Authentication

Antony Scott — Mon, 23 Apr 2012 05:04:32 -0000

it looks like you got your answer via stack overflow. An earlier version of my message handler did have code in place to send back the WWW-Authenticate header in the response, but for some reason I couldn't quite get it to work properly. I found that the framework was adding other authenticate header in there as well so my client ended up picking the wrong (ie - non Basic) authentication method. The solution I posted in this blog article assumes the caller knows what needs authenticating and what method to use. Which I've handled by publishing documentation along with my API. Not ideal, but it does the job :)

Re: ASP.NET Web Api Basic Authentication

Antony Scott — Mon, 23 Apr 2012 05:00:29 -0000

What should happen in that case is the handler will just let the request continue. Then the framework should see the [Authorize] attribute on the method and send back a 401 response because there is no Principal within the request properties. I used a chrome extension to make sure all of this worked. I also wrote a test client application which can be driven by xml test data (ie - expected response codes for given requests). If you're still having problems I can post that code too.

Re: ASP.NET Web Api Basic Authentication

Antony Scott — Mon, 23 Apr 2012 04:56:51 -0000

My authentication doesn't follow a flow as such, that is really up to the client to figure out.

If a request requires authentication and the credentials are not supplied via the "Auth" header then a 401 is returned. If the client sends an anonymous request which returns a 401 it is down to the client to try again with credentials.I've only used a chrome extension to test the authentication side of my API and that sets the Authorization header. Which is also what my clients will be doing.I have also written some test client code using the new HttpClient class (it came along at the same time as the Web Api) and again, I just set the Authorization header and got back the expected results.

Re: ASP.NET Web Api Basic Authentication

David Gray — Thu, 19 Apr 2012 06:43:40 -0000

Thanks for sharing - helped me get a kick start to securing my Web API controllers!

Re: ASP.NET Web Api Basic Authentication

Nick — Wed, 18 Apr 2012 14:23:14 -0000

Hi Antony. Sort of works, but the Authorization header is always blank when I call the service. I have explained it here: http://stackoverflow.com/qu.... Any ideas?

Re: ASP.NET Web Api Basic Authentication

John — Tue, 17 Apr 2012 07:21:03 -0000

Thanks for a great post. Can't really get it to work though. Even if request.Headers.Authorization is null (line 18), my action method with the [Authorize] attribute still gets invoked.

Re: ASP.NET Web Api Basic Authentication

Binoj Antony — Tue, 17 Apr 2012 03:37:13 -0000

Can you also post the code sample for consuming such a service using HttpClient..

Re: I think it’s my destiny to be a grumpy old man!

Guest — Wed, 15 Feb 2012 07:55:00 -0000

Haha, that was actually quite funny. +1

Re: Media PC Build

Antony Scott — Thu, 19 Jan 2012 06:03:10 -0000

I am happy for you to use parts of the blog post as long as you give credit and a link to the original post.

Re: Automatically Adding Entity Framework Config Classes to the ModelBuilder

Antony Scott — Thu, 19 Jan 2012 06:02:06 -0000

Why do you need pictures in a post which is talking about coding?

Re: Media PC Build

Antony Scott — Thu, 19 Jan 2012 06:01:14 -0000

I'm using disqus for comments now. Do you have multiple email addresses registered with that service?

Re: Smooth 1080p MKV playback, FINALLY!

Antony Scott — Thu, 19 Jan 2012 05:59:27 -0000

It came to approximately £450 for the hardware.

Re: Media PC Build

Frances Brosky — Mon, 12 Dec 2011 06:48:36 -0000

Wow, thatâs what I was seeking for, what a information! present here at this website, thanks admin of this site.

Re: Media PC Build

seo — Mon, 12 Dec 2011 01:55:11 -0000

When I initially commented I clicked the âNotify me when new comments are addedâ checkbox and now each time a comment is added I get three emails with exactly the same comment. Is there any way you'll be able to remove me from that service? Cheers!

Re: Automatically Adding Entity Framework Config Classes to the ModelBuilder

backlinks — Sun, 11 Dec 2011 21:25:33 -0000

Just my two cents, but your blog articles will appear additional colorful if you're able to add in some pictures.

Re: Media PC Build

Kaylee — Sat, 10 Dec 2011 20:36:25 -0000

Excellent article and easy to understand explanation. How do I go about getting permission to post part of the article in my upcoming news letter? Giving proper credit to you the author and link to the site would not be a problem.