Asp.Net MVC Authentication Cookie Conflict

Question

Suppose I Created two projects with name ABC and XYZ , and I am using MVC's Inbuilt Identity for Security. Then Problem is, If i login in app ABC I am also Logged In In XYZ . The Authentication Cookie created by ABC app is accepted by XYZ. How to resolve this conflict.

abc and xyz both are different projects with different url right ? — Dhaval Pankhaniya
– Dhaval Pankhaniya, Commented Oct 18, 2017 at 7:29
then they should create different cookies based on domain name and url. so there is not going to be conflict. are you facing any issue right now ? — Dhaval Pankhaniya
– Dhaval Pankhaniya, Commented Oct 18, 2017 at 7:35
As I am Using Inbuilt Identity to reduce my headache it automatically creates the cookie is there any way i can make some changes to the cookie ,so one is different from other? — Pashupati Khanal
– Pashupati Khanal, Commented Oct 18, 2017 at 7:38

jimSampica · Accepted Answer · 2017-10-18 14:27:59Z

2

MVC5

app.UseCookieAuthentication(new CookieAuthenticationOptions
{
    CookieName = "Project1_ApplicationCookie",
    ...
}

MVC6

services.ConfigureApplicationCookie(options => {
    options.Cookie.Name = "Project1_ApplicationCookie";
    ...
});

Rename "Project1" to something relevant and change it between projects

answered Oct 18, 2017 at 14:27

jimSampica

12.5k3 gold badges69 silver badges87 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Pashupati Khanal Over a year ago

Thnaks for your answer .

Collectives™ on Stack Overflow

Asp.Net MVC Authentication Cookie Conflict

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related