Closed olonga closed 7 years ago
This seems to be a general question about IdentityServer - not a bug report or an issue.
Please use StackOverflow for that. This has the advantage that questions and answers can be easily found by search engines, and that there are more people answering questions than just us.
For IdentityServer3 https://stackoverflow.com/questions/tagged/?tagnames=identityserver3&sort=newest
For IdentityServer4 https://stackoverflow.com/questions/tagged/?tagnames=identityserver4&sort=newest
For commercial support https://identityserver.io/
Question / Issue
I have been putting id_token in auth cookie since you need this token while doing single sign out.
notification.ProtocolMessage.IdTokenHint = notification.OwinContext.Authentication.User.FindFirst("id_token").Value;
However, it makes the cookie size larger. So, we were thinking if this is the only time, we need it, it would perhaps be not a bad idea to store it in a database for the user. This way, we could retrieve it before doing the sign out and send it to the ids and will also keep the auth cookie size smaller. Please advise. Thanks.
Relevant parts of the log file