Skip to content

Commit ec7ac78

Browse files
authored
Update aspnetcore/security/authentication/api-endpoint-auth.md
1 parent b77a554 commit ec7ac78

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

aspnetcore/security/authentication/api-endpoint-auth.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ uid: security/authentication/api-endpoint-auth
1313

1414
:::moniker range=">= aspnetcore-10.0"
1515

16-
Starting with ASP.NET Core 10, the framework introduces a significant improvement in how authentication failures are handled for API endpoints when using cookie authentication. This change addresses the common issue where API endpoints would redirect unauthenticated requests to login pages, which is inappropriate for programmatic API access.
16+
When using cookie authentication, API endpoints return the appropriate HTTP status codes (such as 401 or 403) for authentication failures instead of redirecting unauthenticated requests to login pages. This behavior, which is more suitable for programmatic API access, was introduced in ASP.NET Core in .NET 10.
1717

1818
## The problem
1919

0 commit comments

Comments
 (0)