Mix Windows Authentication and individual accounts in web api
问题 I have a web API that use Individual accounts and issue tokens properly. I modified it to accept social authentication from native application. Now, I want to add options for internal employees to access that API using their domain credentials rather than creating new username and password. Employees should call the api/token to get a token, however, they will pass in the body, the domain credential. Any ideas on how to differentiate between normal username and password and domain credentials