Open ghost opened 6 years ago
The default is using the forms authentication cookie middleware that is used by default in ASP.NET. There is some custom logic to make this cookie isolated per tenant, otherwise it works the same.
The default is using the forms authentication cookie middleware that is used by default in ASP.NET.
Hi thanks! there was something a bit confusing about cookies . when i log in and send a request for a content without cookies i get an asp.net auth cookies which log me once again . how is this working .? once i log in and delete all the cookies i get automatically logged in once i request a content . can you explain a bit more please ?
Allow me to insert myself here, as I am working on the authentication layer lately.
@bufferz can you explain the steps you are taking? If I clear my cookies I have to log back in to have the .ASPXAUTH cookie set again to my browser.
@MatteoPiovanelli-Laser thanks for joining .
1 - Login ==> 2 - Clear Cookies ==> 3 - Request content /~ ==> Regaining the.ASPXAUTH
automatically
What version of Orchard are you running? What browser? I don't see that issue on any of the tenants I have an account in, either locally or on our servers.
What version of Orchard are you running? What browser?
I'm using firefox , and the latest version of orchard
So far I have not been able to replicate this on any of the Orchard versions I ran. I tried it on 1.10.x, dev, and the hybrid version we have at work.
I couldn't find any Documentation which explains how the Orchard Authentication System works . side apart from the Authentications/Authorizations interfaces which make really our life more more easier . is there any doc which describe how the default auth of Orchard works ?