aspnetboilerplate Shared cookie invalid with services.AddDataProtection()

Question

I have the following scenario:

Server A:abpWeb; 
Server B:abpWeb;

A and B are based on MyCompanyName.AbpZero template, abp. Net core version 3.1.1;aspnetboilerplate

Browser access A:abpWeb and B:abpWeb. But after logging in, cookie shared is invalid.

A:User.Identity?.IsAuthenticated equals true after Browser access A:Login;

But refresh B:/index on the browser,B:User.Identity?.IsAuthenticated equals false;

The same browser domain for A and B is the same.

I created two new ASP.NET Core 2.0 MVC apps with ASP.NET Core Identity, using AddDataProtection for the normal shared cookie is ok.

I am searching for a long time on net. But no use. Please help or try to give some ideas how to achieve this. Thanks in advance.

This has little to do with [aspnetboilerplate]. Don't add tags to the title. Don't remove the relevant tags that target the appropriate answerers. — aaron, Apr 08 '18 at 02:24

score 0 · Answer 1 · edited Feb 12 '19 at 22:23

The keys that encrypt/decrypt your cookies are probably trying to be written to an invalid folder.

By default AddDataProtection tries to write these keys to: %LOCALAPPDATA%\ASP.NET\DataProtection-Keys

As long as there is an environment variable being used to create the keys path, you will need to set the following config file setting to true.

Fix: Within %WINDIR%\System32\inetsrv\config\applicationHost.config set setProfileEnvironment=true. I think you have to restart IIS as well.

1 Answers1