When running inside a container, need to maintain session between restarts

[csharpfritz]

No description provided.

[johanbenschop]

The theory I have, as discussed on stream, is that the default cookie provider that holds the auth state is encrypted. This key is generated at startup, and a subsequent restart creates a brand new key that cannot decrypt cookies encrypted with the old key. Thus, the state gets invalidated, and users must log in again. Point 4 on this docs page confirms this.

The solution would be to configure Data Protection to persist the key to blob storage or key vault.

See https://learn.microsoft.com/en-us/aspnet/core/security/data-protection/configuration/overview?view=aspnetcore-8.0 for more details.

[csharpfritz]

I think we would want to implement PersistKeysToDbContext and attach to the application security db context.

https://learn.microsoft.com/en-us/aspnet/core/security/data-protection/configuration/overview?view=aspnetcore-8.0#persistkeystodbcontext