SPAuthN - SharePoint .Net auth via Node.js

---

The wrapper for node-sp-auth and node-sp-auth-config for usage in .Net assemblies.

Allows authenticating in SharePoint in whatever you need scenarios and provides a wizard-like approach for building and managing connection config files.

---

On the first place, it is an experiment which solves one of our very specific tasks for a frontier technology stack with SharePoint/Node.js/.Net where we need running the same exactly auth mechanisms which we use in Node.js but in .Net applications. We know exactly what we're doing and why. Please use the lib only in the case when native .Net credentials strategies do not suite your app.

For whom is this library?

For folks who used to create applications for SharePoint with authentication level powered by node-sp-auth-config and node-sp-auth-config and who desire reuse authentication settings parameters and formats in .Net application.

For geeks from geeks passionated with funky technology experiments on their way doing awesome stuff.

For the cases when one tool should rule *all possible authentication strategies in SharePoint.

And definitely not for the situations when these work for you:

• context.Credentials = new SharePointOnlineCredentials("username", "securepass");
• context.Credentials = new NetworkCredential("username", "password", "domain");
• Any other native authentication routes.

Versions supported

• SharePoint Online
• SharePoint 2019
• SharePoint 2016
• SharePoint 2013
• SharePoint 2010 (limited support)

Authentication options

• SharePoint Online:
  • User credentials (SAML/ADFS)
  • Add-In Only permissions
  • On-Demand authentication (using Electron popup)
• SharePoint 2019, 2016, 2013:
  • User credentials (NTLM, NTLM v2)
  • ADFS user credentials
  • Form-based authentication (FBA)
  • Form-based authentication (Forefront TMG)
  • Add-In Only permissions
  • On-Demand authentication (using Electron popup)
• SharePoint 2010:
  • User credentials (NTLM, NTMLv2)
  • Form-based authentication (FBA)
  • Form-based authentication (Forefront TMG)

Config layer and auth supports Office 365 Dedicated (SPO on custom domain) as well.

How to install

Install-Package SPAuthN

How to use

Options options = SPAuth.GetAuth();

That's it! Really!

Now options.headers object contains Cookie or Authorization which can be injected to web requests. This is a low level, session timeouts should be controlled manually.

First run

During very first execution, node modules dependencies are installed. This can take a couple of seconds, second run doesn't need this process repetition so is much faster.

Credentials

node-sp-auth-config is responsible for prompting auth strategy and credentials:

By default, after the propmpts are done ./config/private.json file is created in the root folder of the app.

GetAuth checks for ./config/private.json and continues without prompts if all needed for the strategy parameters are filled in. Password is stored as a secure string, it can be used only on the machine where it was generated. Password can be rewritten in the config and it will be encrypted on next auth method run.

Arguments

GetAuth method receives a string with arguments which are passed as initiators to AuthConfigSettings.

Options options = SPAuth.GetAuth("--encryptPassword=false --configPath='./config/private.uat.json'");

Arguments use cases

Redefine private config file path

--configPath='./config/private.prod.json'

Disable password encryption

--encryptPassword=false

Disable saving private config on disc

--saveConfigOnDisk=false

Enforce parameters prompts

--forcePrompts=true

Raw auth options (example)

--authOptions.siteUrl="http://sharepoint" --authOptions.username="user@contoso.com" --authOptions.password="p@ssw0rd" --saveConfigOnDisk=false

Usage examples

WebRequest

Options options = SPAuth.GetAuth("--configPath='./config/private.json'");
HttpWebRequest request = (HttpWebRequest)WebRequest.Create(options.SiteUrl + "/_api/web?$select=Title");
Request.ApplyAuth(request, options);
request.Method = "GET";
request.Accept = "application/json; odata=verbose";
using (HttpWebResponse response = (HttpWebResponse)request.GetResponse())
{
  if (response.StatusCode == HttpStatusCode.OK || response.StatusCode == HttpStatusCode.NoContent)
  {
    using (Stream dataStream = response.GetResponseStream())
    {
      using (StreamReader reader = new StreamReader(dataStream))
      {
        string strResponse = reader.ReadToEnd();
        dynamic results = JsonConvert.DeserializeObject(strResponse);

        Console.WriteLine("REST | Web title is: {0}", results.d.Title);
      }
    }
  }
}

CSOM

Options options = SPAuth.GetAuth("--configPath='./config/private.json'");
using (ClientContext clientContext = new ClientContext(options.SiteUrl))
{
  Request.ApplyAuth<WebRequestEventArgs>(clientContext, options);

  var web = clientContext.Web;
  clientContext.Load(web);
  clientContext.ExecuteQuery();

  Console.WriteLine("CSOM | Web title is: {0}", web.Title);
}