Windows and Anonymous Authentication in .Net Core 2.0

Question

I\'m trying to mix Windows and Anonymous authentication in a .Net Core 2.0 empty web app. I would like to avoid th

Answer 1

Anonymous takes precedence. You need to call httpContext.ChallengeAsync() when you get an anonymous request to a restricted part of your app. That will cause the client to send credentials on the next request. Here's a test that does this.