Questions tagged [cookie-authentication]
100 questions
0
votes
1 answer
Bearer token authentication with cookie
I want to use Cookie for storing bearer token in my asp.net mvc application and I want that Cookie will be checked per request for client authentication (I don't want to add "Autentication" header for each request on the front-end).
How can I…
Grubuiya
- 3
- 1
0
votes
1 answer
ASP.NET Core Razor Pages Cookie Authentication redirects to the login page after successful login
I followed the article Use cookie authentication without ASP.NET Core Identity and downloaded the sample from 2.x/Cookies.
Ran the sample in VS 2017. Opened the "contact" page as directed in the documentation and from code (that it is protected),…
Muhammad Nouman
- 43
- 1
- 7
0
votes
0 answers
Modify incoming request in ASP.NET OWIN pipeline
We have an application built on a static front-end and an API hosted under a separate subdomain (e.g. web.theapp.com vs api.theapp.com). We've recently implemented a document management component built on top of Azure Blob Storage, with custom…
Tomas Aschan
- 58,548
- 56
- 243
- 402
0
votes
0 answers
Automatically logout off web page Aurelia MVC5 authentication on ExpireTimeSpan
I have an MVC5 ".Net Framework 4.6.2" web sever with Aurelia SPA that works perfectly fine. What I am looking to do, is to extend my authentication to auto-logout the user after a period of inactivity.
With the CookieAuthenticationOptions setup as…
tbruce
- 11
- 3
0
votes
1 answer
Asp.Net MVC Core 2 - Share authentication cookie
I have multiple application running under localhost and will be eventually deployed under one domain name like https://myapp.com/
Applications will be like:
https://myapp.com/security
https://myapp.com/app1
https://myapp.com/app2
When user access…
Gurmeet Khalsa
- 137
- 11
0
votes
3 answers
.net core 2.0 cookie authentication getting stuck in infinite redirect loop when trying to access over https
I have just moved my code to our QA environment which uses https and what was working in Dev is not working in QA because the browser gets stuck in an infinite redirect loop. Our load balancer forces https so when the login redirect happens from…
Blair Holmes
- 1,521
- 2
- 22
- 35
0
votes
0 answers
is OWIN Authentication cookie vulnerable?
I have MVC application hosted Azure and secured by Azure AD. We use OWIN middle ware cookie authentication and openidconnect approach for authentication by Azure AD. We have below observation which appears to be security flaw.
1) Access application…
madhusudan
- 11
- 3
0
votes
0 answers
ASP.NET MVC - Display a message box when force a user logout
I've a policy of my system, which is prevent multiple login. And I'm able to that by updating user's security stamp every time he/she logged in.
The following links are the method I used:
Prevent Multiple Login in ASP.NET…
Kenny Eng
- 149
- 10
0
votes
1 answer
IE11 Cookie Authentication Issues - Multiple Sites, Same Domain
Set the Scene
I'm experiencing a very unique scenario where my ASPNet.SharedCookie seems to be disappearing or altered in IE11 when under a proxy. I'll set the scene:
We have 2 websites that are hosted on different servers, lets call…
Lloyd Powell
- 18,270
- 17
- 87
- 123
-1
votes
1 answer
Claim not found after sucessful HttpContext.SigninAsync
Redefining it again.
I have a asp.net core (api) solution a.sln which has accountcontroller.cs which allows a user to login to the application. Here is AccountController.cs code having Login method.
///
/// Handle postback from…
Atul Verma
- 35
- 6