Brock 1/11/2019

Same-site cookies, ASP.NET Core, and external authentication providers

Read Original

This technical article details a problem where Safari's updated same-site cookie implementation breaks external authentication flows (like OAuth, OpenID Connect) in ASP.NET Core. It walks through the authentication steps, explains why the final redirect fails, and proposes a solution to maintain same-site cookie security while fixing the cross-site login issue.

Same-site cookies, ASP.NET Core, and external authentication providers

Comments

No comments yet

Be the first to share your thoughts!

Browser Extension

Get instant access to AllDevBlogs from your browser