ASP.NET Core 6 and react Windows authentication - reactjs

Question

I have an ASP.NET Core 6 Web API for Windows authentication which is like this:
[HttpGet("GetIdentity")]
public IActionResult GetIdentity()
{
var userName = HttpContext.User.Identity.Name;
return Ok(new { UserName = userName });
}
and everything works fine. Then I called this API from reactjs like this:
import React, { useEffect, useState } from "react";
function UserNameApi() {
const [users, setUser] = useState("");
const fetchData = () => {
return fetch("http://localhost:8000/User/GetIdentity",{withCredentials:true})
.then((res) => {res.json()
.then((result) => setUser(result.userName));
});
};
useEffect(() => {
fetchData();
}, []);
return (
<div>
<p>UserName:{users}</p>
</div>
);
}
export default UserNameApi;
I published both server and client side on IIS but as I open the page, I get an http 401 unauthorized error. I can call the API in the browser, and also used postman and by setting NTLM it works too. I have to add that I have set CORS in API and IIS too.
I will appreciate it if anyone can help me.
Thanks in advance

Answer 1

UPDATE
After adding below code and facing CORS issue.
Change AddCors code like below can fix it.
// Add services to the container.
builder.Services.AddCors(options =>
options.AddPolicy("CorsPolicy", builder =>
{
builder.AllowAnyMethod()
.SetIsOriginAllowed(_ => true)
.AllowAnyHeader()
.AllowCredentials();
}));
...
app.UseHttpsRedirection();
app.UseStaticFiles();
app.UseCors("CorsPolicy");
app.UseRouting();
app.UseAuthorization();
...
In addition to setting "withCredentials" to "true", you should also set "credentials" to "include". This should allow the browser to send the Windows credentials to the server.
Code should like below:
const fetchData = () => {
return fetch("http://localhost:8000/User/GetIdentity",{
withCredentials: true,
credentials: "include"
})
.then((res) => {
res.json()
.then((result) => setUser(result.userName));
});
};