Cookie based authentication on multiple 'localhost' Asp.Net Core Sites

Question

Scenario is only an issue on a development machine.

I have multiple different and entirely independent ASP.NET Core 2.2 projects running on my dev machine under "localhost".

Once I successfully authenticate and log in on one project, I can no longer log in to the other projects. I'm assuming it's something to do with the auth cookies.

All projects have the same identical and basic Identity authentication.

    services.AddAuthentication();

    services.ConfigureApplicationCookie(opt =>
    {
        opt.Cookie.SecurePolicy = Microsoft.AspNetCore.Http.CookieSecurePolicy.None;
        opt.Cookie.HttpOnly = true;                
        opt.Cookie.Expiration = TimeSpan.FromHours(4);
        opt.ExpireTimeSpan = TimeSpan.FromHours(4);
    });

The sign-in call is succeeding:

result = await _signInManager.PasswordSignInAsync(portal.ID, model.Username, model.Password, model.RememberMe, true, loggedInUser);

However, once the user is redirected to the home page, which required authentication, I see the following in the debug output:

Microsoft.AspNetCore.Authorization.DefaultAuthorizationService: Information: Authorization failed.

... and the user is kicked back to the login page.

Is there a way around this issue?

user1142433 · Accepted Answer · 2019-06-18 05:54:36Z

2

Problem solved.

services.ConfigureApplicationCookie(opt =>
{
    opt.Cookie.Name = "Unique Value Per App";
});

All I have to do is post on SO and the problem solves itself!

answered Jun 18, 2019 at 5:54

user1142433

1,5714 gold badges18 silver badges37 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

cbp · Accepted Answer · 2019-06-18 05:52:06Z

1

I would consider running your sites under different domains, and then mapping the domains to localhost (or rather, 127.0.0.1) in your hosts file.

This question explains the technique: Add subdomain to localhost URL

Here is an article which explains the hosts file for different operating systems: https://www.howtogeek.com/howto/27350/beginner-geek-how-to-edit-your-hosts-file/

answered Jun 18, 2019 at 5:52

cbp

25.7k29 gold badges134 silver badges214 bronze badges

1 Comment

user1142433 Over a year ago

Clever! Thank you.

Jalal Malekpour · Accepted Answer · 2024-06-11 04:19:32Z

0

When I used https on the local host, the cookie created on the first site was transferred to the second site.

answered Jun 11, 2024 at 4:19

Jalal Malekpour

4710 bronze badges

Collectives™ on Stack Overflow

Cookie based authentication on multiple 'localhost' Asp.Net Core Sites

3 Answers 3

Comments

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related