Brock 1/11/2019

Same-site cookies, ASP.NET Core, and external authentication providers

Read Original

This technical article details a problem where Safari's updated same-site cookie implementation breaks external authentication flows (like OAuth, OpenID Connect) in ASP.NET Core. It walks through the authentication steps, explains why the final redirect fails, and proposes a solution to maintain same-site cookie security while fixing the cross-site login issue.

Same-site cookies, ASP.NET Core, and external authentication providers

Comments

No comments yet

Be the first to share your thoughts!

Browser Extension

Get instant access to AllDevBlogs from your browser

Top of the Week