New answers tagged authentication
Look at http://paulryan.com.au/2014/spo-remote-authentication-rest/ It works for me (if I get you right). Just ignore stuff about digest - put mentioned 2 cookies into your header as Cookie:c1;c2 where c1 and c2 are authentication cookies (ones starting from FedAuth= and rtFa=).
To summarize, you have the following scenario: You have a SharePoint add in (SharePoint App). A page on the add in web (app web) needs to call an external service. You have an external service implemented using ASP.NET Web Api. The external service needs authentication. The first issue you need to address is the Same Origin Policy. To overcome this ...
I fixed this issue by changing authentication for the "catchall/app" web from negotiate to NTLM. I´m still not sure what fiddler does so it works, but at least apps work as expected. An error in chrome "Invalid Auth Credentials" pointed me in the right direction.
Top 50 recent answers are included