Using Forms authentication cross domain

Question

here is our problem.. We have built an MVC Web-api that uses Forms authentication with cookies to handle sessions. When we use our front-end webpage on the same domain (localhost or web-server) as the web-api, all works fine. (We use JQuery $.get and $.post to communicate with the web-api).

Though the front-end is in the future supposed to be a standalone html5 app, not located on the same domain as the web-api. This isn't working unfortunately.

The web-api does return an authentication cookie to the client, BUT the cookie isn't brought back to the web-api when the front-end sends it's requests. When both web-api and front-end are on the same domain, the cookie is automatically sent with the request.

We've tried setting "Access-Control-Allow-Origin: *" and "Access-Control-Allow-Authentication: true" in the web-api webconfig file.

Were you able to solve this problem? I am in a similar situation but my client app in a HTML5 based phonegap application that runs on mobile browser containers. — Shreedhar Kotekar
– Shreedhar Kotekar, Commented Nov 6, 2013 at 6:06

Rajeesh · Accepted Answer · 2012-05-17 09:31:40Z

4

What you need is a single-sign-on(SSO) feature.

Browser will only cookies to the same domain, that is the reason why it was not working when applications are located on different domains.

There a nice article in CodeProject on implementing SSO in ASP.NET - http://www.codeproject.com/Articles/106439/Single-Sign-On-SSO-for-cross-domain-ASP-NET-applic it applies to ASP.Net MVC too.

answered May 17, 2012 at 9:31

Rajeesh

4,5154 gold badges28 silver badges29 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

saiyancoder Over a year ago

That is a great article!

Collectives™ on Stack Overflow

Using Forms authentication cross domain

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related