Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add subdomain config in cookie sharing topic #7791

Merged
merged 4 commits into from Jul 24, 2018
Merged

Add subdomain config in cookie sharing topic #7791

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
bf46eb5
Add subdomain config in cookie sharing topic
guardrex Jul 24, 2018
6fafc3b
Update
guardrex Jul 24, 2018
8115823
Harden README by removing versions
guardrex Jul 24, 2018
056b69e
Update
guardrex Jul 24, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
14 changes: 13 additions & 1 deletion aspnetcore/security/cookie-sharing.md
View file
Open in desktop
Expand Up @@ -45,6 +45,12 @@ In the `ConfigureServices` method, use the [ConfigureApplicationCookie](/dotnet/

Data protection keys and the app name must be shared among apps. In the sample apps, `GetKeyRingDirInfo` returns the common key storage location to the [PersistKeysToFileSystem](/dotnet/api/microsoft.aspnetcore.dataprotection.dataprotectionbuilderextensions.persistkeystofilesystem) method. Use [SetApplicationName](/dotnet/api/microsoft.aspnetcore.dataprotection.dataprotectionbuilderextensions.setapplicationname) to configure a common shared app name (`SharedCookieApp` in the sample). For more information, see [Configuring Data Protection](xref:security/data-protection/configuration/overview).

When hosting apps that share cookies across subdomains, specify a common domain in the [Cookie.Domain](/dotnet/api/microsoft.aspnetcore.http.cookiebuilder.domain) property. To share cookies across apps at `contoso.com`, such as `first_subdomain.contoso.com` and `second_subdomain.contoso.com`, specify the `Cookie.Domain` as `.contoso.com`:

```csharp
options.Cookie.Domain = ".contoso.com";
```

See the *CookieAuthWithIdentity.Core* project in the [sample code](https://github.com/aspnet/Docs/tree/master/aspnetcore/security/cookie-sharing/sample/) ([how to download](xref:tutorials/index#how-to-download-a-sample)).

# [ASP.NET Core 1.x](#tab/aspnetcore1x/)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove the tabs while you're in here.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We're getting dogged a little bit over 2.1 issues atm. I recommend an issue for this work pushed back a few sprints, which should provide enough time to catch up on a bunch of 2.1 sample updates. Do u agree?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm okay with that approach.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#7794

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

My plan is to make another big dent in 2.1 sample updates this sprint. I have the mega-Configuration issue to work on this sprint. Other than that tho, it looks like I'll have time for some good 2.1 sample update work.

Expand Down Expand Up @@ -83,7 +89,13 @@ When using cookies directly:

[!code-csharp[](cookie-sharing/sample/CookieAuth.Core/Startup.cs?name=snippet1)]

Data protection keys and the app name must be shared among apps. In the sample apps, `GetKeyRingDirInfo` returns the common key storage location to the [PersistKeysToFileSystem](/dotnet/api/microsoft.aspnetcore.dataprotection.dataprotectionbuilderextensions.persistkeystofilesystem) method. Use [SetApplicationName](/dotnet/api/microsoft.aspnetcore.dataprotection.dataprotectionbuilderextensions.setapplicationname) to configure a common shared app name (`SharedCookieApp` in the sample). For more information, see [Configuring Data Protection](xref:security/data-protection/configuration/overview).
Data protection keys and the app name must be shared among apps. In the sample apps, `GetKeyRingDirInfo` returns the common key storage location to the [PersistKeysToFileSystem](/dotnet/api/microsoft.aspnetcore.dataprotection.dataprotectionbuilderextensions.persistkeystofilesystem) method. Use [SetApplicationName](/dotnet/api/microsoft.aspnetcore.dataprotection.dataprotectionbuilderextensions.setapplicationname) to configure a common shared app name (`SharedCookieApp` in the sample). For more information, see [Configuring Data Protection](xref:security/data-protection/configuration/overview).

When hosting apps that share cookies across subdomains, specify a common domain in the [Cookie.Domain](/dotnet/api/microsoft.aspnetcore.http.cookiebuilder.domain) property. To share cookies across apps at `contoso.com`, such as `first_subdomain.contoso.com` and `second_subdomain.contoso.com`, specify the `Cookie.Domain` as `.contoso.com`:

```csharp
options.Cookie.Domain = ".contoso.com";
```

See the *CookieAuth.Core* project in the [sample code](https://github.com/aspnet/Docs/tree/master/aspnetcore/security/cookie-sharing/sample/) ([how to download](xref:tutorials/index#how-to-download-a-sample)).

Expand Down
6 changes: 3 additions & 3 deletions aspnetcore/security/cookie-sharing/sample/README.md
View file
Open in desktop
Expand Up @@ -4,9 +4,9 @@ The sample illustrates cookie sharing across three apps that use cookie authenti

| Project | Description |
| ----------------------------------- | ----------- |
| CookieAuth.Core | ASP.NET Core 2.0 Razor Pages app without using ASP.NET Core Identity |
| CookieAuthWithIdentity.Core | ASP.NET Core 2.0 MVC app with ASP.NET Core Identity |
| CookieAuthWithIdentity.NETFramework | ASP.NET Framework 4.6.1 MVC app with ASP.NET Identity |
| CookieAuth.Core | ASP.NET Core Razor Pages app without using ASP.NET Core Identity |
| CookieAuthWithIdentity.Core | ASP.NET Core MVC app with ASP.NET Core Identity |
| CookieAuthWithIdentity.NETFramework | ASP.NET Framework MVC app with ASP.NET Identity |

Instructions:

Expand Down