Sharing Authentication Cookies in ASP.NET Upgrade Scenarios Migrating ASP.NET to ASP.NETCore

Darshan S 0

I have web application in .net framework 4.7.2.

Now I am upgrading it to .net core 6.

I want to share user authentication from old app to new .net core 6 app.

But I am not able to access claims data in new .net core 6 upgraded application using system.web.adaptor.

Tiny Wang-MSFT 2,486 Reputation points Microsoft Vendor

2024-07-26T01:51:53.0933333+00:00

Hi @DarshanS-6152 , .Net 6 will end of life this November, I think you might upgrade to .Net 8.
Tiny Wang-MSFT 2,486 Reputation points Microsoft Vendor

2024-07-31T09:03:10.8033333+00:00

Hi, thank you for sharing the code snippet for how you set the cookie in .net framework. Could you please let us know what does share user authentication from old app to new .net core 6 app mean? Do you mean you will have 2 web apps and want them to share cookie? Or you just upgrade the .net framework app to .net 6 app, and now you used the same code for setting cookie but you couldn't read the cookie value?
Darshan S 0 Reputation points

2024-07-31T09:30:45.68+00:00

Thank you for your interest in resolving this issue.

There are 2 application one is .net framework 4.7.2 MVC and another one is it's upgrade project in .net core 6. So old application is using form authentication which is internally using cookie. And while sharing the authentication with .net core application it is only transferring user identity data but not claims data.
Tiny Wang-MSFT 2,486 Reputation points Microsoft Vendor

2024-07-31T09:46:18.14+00:00

I'm glad to receive your reply. Then the requirement now is sharing cookie between .net framework 4.7 app and a .net 6 mvc app, the issue we are facing now is that we signed in .net framework app and set cookie in this app. By sharing the cookie, we could get user identity data but not claims data. Here, could you please show us a sample how you created claims and read these claims in .net framework app. And then how you try to read claims data in .net 6 MVC app? The issue might be 1. didn't create claims successuflly, 2.didn't share claims data successfully 3. didn't read claims data successfully.

By the way, AgaveJoe already shared a document about how to share cookie with asp.net apps, have you referred it?

1 answer

AgaveJoe 28,026 Reputation points

2024-07-25T13:09:04.5166667+00:00

The official documentation covers how to share authentication cookies. Maybe the docs have what you're looking for.

https://learn.microsoft.com/en-us/aspnet/core/security/cookie-sharing?view=aspnetcore-8.0
Please sign in to rate this answer.
Darshan S 0 Reputation points

2024-07-29T07:42:43.0166667+00:00

Thanks for the detail.
My old application which is in .net framework 4.7.2 uses cookie based FormsAuthentication.
It contains FormsAuthenticationTicket with user detail in encrypted format.
So those details not carry forward to new .net core 6 application.

Code for old application is like as below

FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket(1,User.EmailId,issueDate,expiration,isPersistent,Newtonsoft.Json.JsonConvert.SerializeObject(UserDetail), FormsAuthentication.FormsCookiePath);
string enTicket = FormsAuthentication.Encrypt(authTicket);

HttpCookie authCookie = new HttpCookie(FormsAuthentication.FormsCookieName, enTicket);

authCookie.Secure = FormsAuthentication.RequireSSL;

authCookie.HttpOnly = true;

authCookie.Expires = authTicket.IsPersistent ? authTicket.Expiration : DateTime.MinValue;

Response.Cookies.Remove(FormsAuthentication.FormsCookieName);

Response.Cookies.Add(authCookie);
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Sharing Authentication Cookies in ASP.NET Upgrade Scenarios Migrating ASP.NET to ASP.NETCore

1 answer

Your answer