How to debug method with [Authorize] attribute in fiddler? RSS

• • Reply
  

  VictorWoo

  Member

  9 Points

  11 Posts

  How to debug method with [Authorize] attribute in fiddler?

  Dec 26, 2012 08:00 AM|LINK

  How to debug Web API controller method with [Authorize] attribute in fiddler?

  Adding "Authorization: Basic xxxxxxxxxx" to the HTTP head also get a response code of 401.

  So how to debug API controller method with [Authorize] attribute in fiddler?

  And also, to call API controller method with [Authorize] from embedded client? Is there a best practice?

  • Edited by victorwoo on Dec 26, 2012 08:00 AM
• • Reply
  

  BrockAllen

  All-Star

  28084 Points

  4997 Posts

  MVP

  Re: How to debug method with [Authorize] attribute in fiddler?

  Dec 26, 2012 03:26 PM|LINK

  It sounds like you're debugging directly from fiddler (rather than some client code you've written). So either remove the attribute while testing (assuming you're on a dev box) or you'll need to pass a valid authorization header.

  Brock Allen | http://brockallen.com
  DevelopMentor | http://www.develop.com
  thinktecture | http://www.thinktecture.com/
• • Reply
  

  VictorWoo

  Member

  9 Points

  11 Posts

  Re: How to debug method with [Authorize] attribute in fiddler?

  Jan 04, 2013 02:11 AM|LINK

  Some resources are user-specificed, so remove [Authorize] may cause User.Identity, etc., empty.

  How to build a valid authorization header? Is there a guide? I think it is a common scene.

• • Reply
  

  BrockAllen

  All-Star

  28084 Points

  4997 Posts

  MVP

  Re: How to debug method with [Authorize] attribute in fiddler?

  Jan 04, 2013 02:17 AM|LINK

  I'd suggest watching this video on securing WebAPI:

  http://vimeo.com/43603474

  Brock Allen | http://brockallen.com
  DevelopMentor | http://www.develop.com
  thinktecture | http://www.thinktecture.com/