Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 4737

BUG: ASP.NET Identity returns the wrong UserID

$
0
0

I have two separate MVC5 applications.  Each application has its own SQL database separate from the other application.

Both applications use ASP.NET Identity.

I've created a user in each application.  Both users have the same username: BARRY

If I choose "Remember me" while logging in to one site, the other site seems to think it should use that same remembered login.
This seems to only happen when both sites run under the same domain - in this case, localhost.

I assume this is because Identity uses cookies to remember a login.  However both sites run on a different port.  Shouldn't the cookie tie itsself to the port, or some other site-specific data?

Using the cookie from the wrong site leads to some really annoying runtime errors.


Viewing all articles
Browse latest Browse all 4737

Trending Articles