401 Unauthorized in dotnet core 2.1

Question

After migrationg to .netcore 2.1 am getting below error 401.2 unauthorized am using cookie & JWT authentication and allowannoymous authentication as true.

Viswanatha Swamy · Answer

Anvesh, If, I am understanding you correctly. You have once Web API and you have a client. The client is performing Http client and it is failing. Is this correct? Please advice.

Anvesh Reddy · Answer

Hi Swamy its failing while performing Http Operations its retun 401.2 unauthorized after upgradtion to SDK 2.1 _httpResponse = await HttpClient.SendAsync(_httpRequest, cancellationToken).ConfigureAwait(false); Thanks

Viswanatha Swamy · Answer

Is it possible to do a screen share? We can hunt in a skype call? The error message which you have pasted is mentioning IIS Server. IIS 10.0 Detailed Error - 401.2 - Unauthorized

Anvesh Reddy · Answer

It is Kestrel

Viswanatha Swamy · Answer

Anvesh, Is it on 1. IIS Server OR 2. IIS Express OR 3. Kestrel?

Anvesh Reddy · Answer

Hi Swamy, am running this on local server.

Viswanatha Swamy · Answer

Anvesh, 401.2 points to the Server configuration. Is it possible to catch up on Skype to do the screen share and fix it? 401.2 Logon failed due to server configuration This HTTP status code indicates a problem in the authentication configuration settings on the server. For more information about how to resolve this problem, click the following article number to view the article in the Microsoft Knowledge Base: 942043 Error message when you try to visit a webpage that is hosted on IIS 7.0: "HTTP Error 401.2 - Unauthorized" Also, please verify this on your server.

Anvesh Reddy · Answer

Hi these two am using

Viswanatha Swamy · Answer

Hi Anvesh, Could you please verify what items are enabled under Authentication inside IIS where you have hosted the application. Could you please paste the image.

Anvesh Reddy · Answer

Hi swamy this is exact error am getting IIS 10.0 Detailed Error - 401.2 - Unauthorized body{margin:0;font-size:.7em;font-family:Verdana,Arial,Helvetica,sans-serif;} code{margin:0;color:#006600;font-size:1.1em;font-weight:bold;} .config_source code{font-size:.8em;color:#000000;} pre{margin:0;font-size:1.4em;word-wrap:break-word;} ul,ol{margin:10px 0 10px 5px;} ul.first,ol.first{margin-top:5px;} fieldset{padding:0 15px 10px 15px;word-break:break-all;} .summary-container fieldset{padding-bottom:5px;margin-top:4px;} legend.no-expand-all{padding:2px 15px 4px 10px;margin:0 0 0 -12px;} legend{color:#333333;;margin:4px 0 8px -12px;_margin-top:0px; font-weight:bold;font-size:1em;} a:link,a:visited{color:#007EFF;font-weight:bold;} a:hover{text-decoration:none;} h1{font-size:2.4em;margin:0;color:#FFF;} h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.4em;margin:10px 0 0 0;color:#CC0000;} h4{font-size:1.2em;margin:10px 0 5px 0; }#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS",Verdana,sans-serif; color:#FFF;background-color:#5C87B2; }#content{margin:0 0 0 2%;position:relative;} .summary-container,.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;} .content-container p{margin:0 0 10px 0; }#details-left{width:35%;float:left;margin-right:2%; }#details-right{width:63%;float:left;overflow:hidden; }#server_version{width:96%;_height:1px;min-height:1px;margin:0 0 5px 0;padding:11px 2% 8px 2%;color:#FFFFFF; background-color:#5A7FA5;border-bottom:1px solid #C1CFDD;border-top:1px solid #4A6C8E;font-weight:normal; font-size:1em;color:#FFF;text-align:right; }#server_version p{margin:5px 0;} table{margin:4px 0 4px 0;width:100%;border:none;} td,th{vertical-align:top;padding:3px 0;text-align:left;font-weight:normal;border:none;} th{width:30%;text-align:right;padding-right:2%;font-weight:bold;} thead th{background-color:#ebebeb;width:25%; }#details-right th{width:20%;} table tr.alt td,table tr.alt th{} .highlight-code{color:#CC0000;font-weight:bold;font-style:italic;} .clear{clear:both;} .preferred{padding:0 5px 2px 5px;font-weight:normal;background:#006633;color:#FFF;font-size:.8em;} --> HTTP Error 401.2 - Unauthorized You are not authorized to view this page due to invalid authentication headers. Most likely causes: No authentication protocol (including anonymous) is selected in IIS. Only integrated authentication is enabled, and a client browser was used that does not support integrated authentication. Integrated authentication is enabled and the request was sent through a proxy that changed the authentication headers before they reach the Web server. The Web server is not configured for anonymous access and a required authorization header was not received. The "configuration/system.webServer/authorization" configuration section may be explicitly denying the user access. Things you can try: Verify the authentication setting for the resource and then try requesting the resource using that authentication method. Verify that the client browser supports Integrated authentication. Verify that the request is not going through a proxy when Integrated authentication is used. Verify that the user is not explicitly denied access in the "configuration/system.webServer/authorization" configuration section. Check the failed request tracing logs for additional information about this error. For more information, click here . Detailed Error Information: Module    IIS Web Core Notification    AuthenticateRequest Handler    aspNetCore Error Code    0x80070005 Requested URL    http://localhost:14550/api/v1/Application/&u=Anvesh.Reddy@gmail.com Physical Path    C:\Users\Anvesh.Reddy\source\repos\TechStore\src\TechStore.SecurityModel\api\v1\Application\&u=Anvesh.Reddy@gmail.com Logon Method    Not yet determined Logon User    Not yet determined Request Tracing Directory    C:\Users\Anvesh.Reddy\OneDrive\Documents\IISExpress\TraceLogFiles\TECHSTORE.SECURITYMODEL More Information: This error occurs when the WWW-Authenticate header sent to the Web server is not supported by the server configuration. Check the authentication method for the resource, and verify which authentication method the client used. The error occurs when the authentication methods are different. To determine which type of authentication the client is using, check the authentication settings for the client. View more information &raquo; Microsoft Knowledge Base Articles: 907273 253667

Viswanatha Swamy · Answer

@Anvesh Reddy, Good evening. Is the method which is marked as AllowAnnoymous is also failing? Could you please paste the Method skleton and PostMan image screen print?