Use MachineKey in ASP.NET vNext

[daverupp]

Hey all
I am using a OWIN based IdentityServer and there I have a MachineKey for Token generation. What are the plans to use the MachineKey functionality as well within a ASP.NET vnext MVC 6 Application? There is now way to reference the MachineKey's System.Web dll (Of course that makes totally sense, but what is the alternative?)

My Target:
I want to create access Tokens based on the same key for further usage on the ResourceServer.
(Kind of authorization workflow decoupled from the resource server)

thanks for any help or ideas how to solve that.
Kind regards
Dave

[Eilon]

@GrabYourPitchforks @blowdart

[blowdart]

What creates your tokens?

We'll have a machine key equivalent which should address some of the multi-machine problems, but you may also just want to generate your keys yourself if you're doing the token generation.

(It's not checked in yet though AFAIK)

[GrabYourPitchforks]

There is already a MachineKey equivalent in vNext; see the https://github.com/aspnet/dataprotection project for more information. Unfortunately we don't really have samples that show how to use it, but I hope to create docs and samples over the next few weeks.

[rjhernandez]

Did any samples ever get published?

[GrabYourPitchforks]

@rjhernandez yup! See https://docs.asp.net/en/latest/security/data-protection/.

[mattlittle16]

Can DataProtection be used in place of static machine key that one would put into a web.config to sign auth cookies?

[blowdart]

@Red6Porkins Yes, that's what it's designed for, as pointed out above.

The documentation is also pointed to above.