What would it take to support Integrated/Basic+SSL?

Jul 18, 2011 at 2:41 PM

Since adding private repo support to Nuget is complete: http://nuget.codeplex.com/workitem/366

We were looking at hosting a gallery on our coporate intranet/extranet but discovered the site will not work at all under Integrated or Basic; it has to be Anonymous. Obviously, this is unacceptable because we don't need random people adding our own in-house Nuget packages. Typically all of our sites use integrated auth and then basic over SSL if accessed at home.

We're trying to figure out if it would be worth it to contribute to the project to add this support but were hoping someone already had this in mind or was working on it. I didn't see any related work items in the open list, however, so I figured I'd ask.

Do you know if this is a possibility as the site seems heavily tied to forms auth?

Jul 18, 2011 at 4:16 PM

I’m not sure I understand the question.

The bug you mentioned, http://nuget.codeplex.com/workitem/366, adds support for NuGet to connect to a feed that uses basic authentication. Which is exactly what you’re asking for. The site doesn’t need to be anonymous.

Note that this fix is for NuGet 1.5 which is not yet released. If you want to try the latest build directly from our continuous integration server (at your own risk!), it’s located here: http://ci.nuget.org:8080/repository/download/bt4/2044:id/VisualStudioAddIn/NuGet.Tools.vsix

Jul 18, 2011 at 10:10 PM

Ah I should have been specific. With 1.5, the Nuget.Server and Nuget Package Manager should be able to support Integrated/Basic, correct?

This is great but we ideally wanted to integrate the Nuget Gallery into our environment; however, that is built on top of Orchard. That is what cannot be run using Integrated auth or basic; I suppose this is more of a question for the Orchard project itself. My guess is that they will not have this planned anytime soon which means in order to have a front-end ala the gallery, we'll have to roll our own or make do without one.

Jul 18, 2011 at 10:25 PM

Well NuGet.Server is just a normal ASP.NET project. You can make it run in basic authentication by turning it on in IIS.

As for NuGet Gallery, it sounds like you want to enable basic authentication, but integrate that authentication into the Orchard user database. That sounds like a feature request for the Orchard project. J