Using Forms Authentication with WebAPI when the client is in a different domain?

Question

Related question:

Authentication in .NET Web API using MVC FormsAuthentication

I have a client application that lives outside of my WebAPI solution's domain (right now two different solutions on localhost - one on port X, the other on port Y). I'm attempting to use forms authentication with code like this:

if (WebSecurity.Login(model.UserName, model.Password, persistCookie: true))
            {
                var response = Request.CreateResponse(HttpStatusCode.OK, "logged in successfully");
                return response;
            }

In something like POSTMan this works, but using the client / JS application, the cookie does not get saved, so the user is never truly authenticated. I see the _RequestVerificationToken, but never the .ASPXAUTH token.

A requirement of this application is to use forms auth by setting cookies using WebSecurity. Is this possible when client and server are on different domains?

If there's anything else I can provide to make this issue clearer, please let me know.

Badrinarayanan Lakshmiraghavan · Accepted Answer · 2013-07-06 19:43:27Z

2

Assuming you are using CORS. By default, cookies are not enabled with CORS. In jQuery, you need to set

xhrFields: {
       withCredentials: true
}

Also, the server must send the response header Access-Control-Allow-Credentials: true.

answered Jul 6, 2013 at 19:43

Badrinarayanan Lakshmiraghavan

19.3k6 gold badges65 silver badges63 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

SB2055 Over a year ago

Disregard my previous comment - everything is working. Thank you SO much - you saved me countless hours.

Collectives™ on Stack Overflow

Using Forms Authentication with WebAPI when the client is in a different domain?

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related