Auth

2026-07-30 17:30:40 +00:00 · 2026-07-20 00:19:09 +03:00
parent 6b90ac13e8
commit 3fc5991a84
2 changed files with 8 additions and 1 deletions
@@ -459,7 +459,10 @@ namespace Esiur.Security.Authority.Providers
                                                           .ToArray(), 512);

                        _step = -1;
-                        return new AuthenticationResult(AuthenticationRuling.Succeeded, null, _initiatorIdentity, _responderIdentity, sessionKey);
+                        // From the responder's perspective the authenticated initiator is
+                        // the remote identity. Keeping it in LocalIdentity makes a valid
+                        // client appear anonymous to server-side permission managers.
+                        return new AuthenticationResult(AuthenticationRuling.Succeeded, null, _responderIdentity, _initiatorIdentity, sessionKey);

                    }
                    else