ASP.Net Identity Logout

Question

How to logout an user logged in with the ASP.Net Identity system?

I tried:

Authentication.SignOut();

But if I use this and then call an API marked with [Authorize] (adding the token as an header) It still returns me the data (instead of Unauthorized).

Did you add specific users or groups that can use this resource? — albusshin
– albusshin, Commented Dec 21, 2013 at 0:54

StuartQ · Accepted Answer · 2017-11-17 11:54:37Z

47

You need to call SignOut on the AuthenticationManager which you can get from the OWIN context.

var AuthenticationManager= HttpContext.GetOwinContext().Authentication;
AuthenticationManager.SignOut();

edited Nov 17, 2017 at 11:54

StuartQ

3,8191 gold badge28 silver badges23 bronze badges

answered Dec 21, 2013 at 0:38

pranav rastogi

4,10226 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

renakre Over a year ago

just a quick fix: it should include Current: HttpContext.Current.GetOwinContext().Authentication

Matthew Walton Over a year ago

If you're inside an ASP.NET MVC controller you've got an instance property HttpContext from the base class, so you don't need HttpContext.Current in that scenario.

netchkin Over a year ago

@MatthewWalton true, but if you are in let's say your custom HttpModule, then you certainly need HttpContext.Current...

Auspex Over a year ago

Presumably this is pre .Net Core. Any idea how to do it in Core?

Seb Over a year ago

@Auspex just tried out some methods, in my case the SignOutAsync() Method of the SingInManager class worked

|

Liam · Accepted Answer · 2017-04-27 11:18:11Z

1

In my case, because i had Authorize attribute in my AccountController with admin role at class level i had to put [AllowAnonymous] attribute to my logout method. May be a solution to you too.

edited Apr 27, 2017 at 11:18

Liam

30k28 gold badges143 silver badges206 bronze badges

answered Sep 2, 2016 at 9:07

O.Taaffe

111 silver badge3 bronze badges

1 Comment

Leandro Bardelli Over a year ago

you could get an exception if an anonymous user tried to logout having the url. You should make a role only as a flag to a logged user. Same role to index logged user.

Collectives™ on Stack Overflow

ASP.Net Identity Logout

2 Answers 2

7 Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

7 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related