Is it wrong to send Active Directory credentials of a user to a backend system
I had to review some code today for an intranet site which was a javascript form with a C# WebAPI which sends the AD username and password (during login) to the backend and then logged in as that user against…