AllowedImpersonationLevel = TokenImpersonationLevel.Delegation Stopped Working on Version Later Than v4.4.2

[AbeBaehaki]

Describe the bug

I have a WCF client with settings as below:

var binding = new BasicHttpBinding(BasicHttpSecurityMode.Transport);
binding.Security.Transport.ClientCredentialType = HttpClientCredentialType.Windows;

var address = new EndpointAddress($"https://myserviceendpoint.com/service.asmx");

var channelFactory = new ChannelFactory<T>(binding, address);
channelFactory.Credentials.Windows.AllowedImpersonationLevel = TokenImpersonationLevel.Delegation;

It works fine on WCF packages v4.4.2. But when I updated the packages version to v4.7.0 (Latest stable at the time of writing) then it seems like the ImpersonationLevel = TokenImpersonationLevel.Delegation is not working anymore.

My code still compiles, but I got an error thrown from the web service side related to the impersonation settings.

Referenced packages:

System.ServiceModel.Duplex
System.ServiceModel.Http
System.ServiceModel.NetTcp
System.ServiceModel.Security

Additional context
The web service that I am consuming is built using .NET asmx web service technology.
With system.web settings as below:

<authentication mode="Windows"/>
<identity impersonate="true"/>

No other security settings are involved in this scenario.

[StephenBonikowsky]

@AbeBaehaki thanks for reporting this. Looks like this is a problem with SocketsHttpHandler that WCF depends on. We will investigate further and update this issue with our findings.

In the meantime as a workaround could you try adding AppContext.SetSwitch("System.Net.Http.UseSocketsHttpHandler", false); at the start of your app?

[StephenBonikowsky]

This is a potential regression that should be investigated so a bug can be opened in the runtime repo if needed.

[AbeBaehaki]

The workaround seems to be working. Tested in v4.7.0.

In the meantime as a workaround could you try adding AppContext.SetSwitch("System.Net.Http.UseSocketsHttpHandler", false); at the start of your app?

Is there any side effects of this that I should be aware of?

[StephenBonikowsky]

@mconnew

[HongGit]

@mconnew can you please follow up on this?

[HongGit]

@mconnew gentle ping?