Navigation

    Inedo Community Forums

    Forums

    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    1. Home
    2. marcus_1459
    3. Topics
    M
    • Profile
    • Following
    • Followers
    • Topics
    • Posts
    • Best
    • Groups

    Topics created by marcus_1459

    • M

      SECURITY VULNERABILITY: nuget cli requires anonymous access to feed
      Support • • marcus_1459  

      7
      0
      Votes
      7
      Posts
      8
      Views

      atripp

      I'm sorry that my suggestion offended you. ProGet doesn't "prefer" anything. It's a standard, authenticated feed. If it works in your browser (i.e. the feed endpoint URL), then it should work in NuGet. if it doesn't work in NuGet, then NuGet isn't being configured correctly. "Behind the scenes", NuGet uses "basic authentication" to transmit those credentials to ProGet. It's the same mechanism your browser uses when you navigate to the feed API (i.e. a pop-up). Credentials are stored in the nuget.config; the link I provided shows you how to edit that configuration file. You can either edit it yourself or use the sources command-line argument. https://docs.microsoft.com/en-us/nuget/reference/nuget-config-file#packagesourcecredentials You can attach a tool like Fiddler to NuGet.exe, and see what it's sending in different cases. It might be a NuGet bug.
    • M

      Nuget install prompting for credentials
      Support • • marcus_1459  

      2
      0
      Votes
      2
      Posts
      10
      Views

      atripp

      The first thing that comes to mind is Integrated Windows Authentication; you often won't be able to authenticate unless your computer is on the domain. This is a limitatino/feature of Windows (i.e. it's by design to work this way). As a work-around, you can setup a second site that doesn't have IWS enabled, and point to the same folder on disk.
    • 1 / 1