The antiforgery token could not be decrypted - Same app multiple times on the same server - Virtual Directories

Question

I have published the same app to the same server but on different virtual directories.

https://server.com/test https://server.com/prod

I get the error from the title, I suppose ASP.NET MVC "sees" them as the same website (server.com)

For sure there must be a setup or a configuration to make them work together, but couldn't find anything online.

What version of ASP.NET do you use? – Tore Nestenius Jul 28 '22 at 14:40 — Tore Nestenius, Jul 28 '22 at 14:40
Latest (MVC 5.2) - .NET 6 – Cătălin Rădoi Jul 28 '22 at 14:57 — Cătălin Rădoi, Jul 28 '22 at 14:57

Vahid · Answer 1 · 2022-07-28T16:00:58.260

2

I suppose ASP.NET MVC "sees" them as the same website (server.com).

No, they are considered as different apps in your webserver.

The problem is about the signing/encryption of the anti-forgery tokens that is governed by the keys held in the section of your web config. if you don't explicitly define them the asp.net will generates them automatically of course they will be unique and different on your two virtual directories and they will be cached on your browser, then when you switch requsts between your two instance you got this error.

the solution is here.

more details here.

edited Jul 28 '22 at 16:00

answered Jul 28 '22 at 15:33

Vahid

474
2
7
20

I tried to put two different machine keys in web.configs but it didn't solve my issue – Cătălin Rădoi Jul 29 '22 at 09:30
1

It would make more sense to have the SAME machine key. Tried, but still it doesn't work :( – Cătălin Rădoi Jul 29 '22 at 09:44
Fixed it! As I am using a cookie to send the token, I only had to set a different path for the cookie. – Cătălin Rădoi Jul 29 '22 at 10:28
1

The cookie workaround is good for your scenario. but if you had a serverless app that doesn't seem good. happy it hepled you. so please vote up my answer :) @CătălinRădoi – Vahid Jul 29 '22 at 16:29

The antiforgery token could not be decrypted - Same app multiple times on the same server - Virtual Directories

1 Answers1