search

OrchardCMS / Orchard

Orchard is a free, open source, community-focused Content Management System built on the ASP.NET MVC platform.
https://orchardproject.net
BSD 3-Clause "New" or "Revised" License
2.37k stars 1.12k forks source link

Orchard Authentication System #7960

Open ghost opened 6 years ago

ghost commented 6 years ago

I couldn't find any Documentation which explains how the Orchard Authentication System works . side apart from the Authentications/Authorizations interfaces which make really our life more more easier . is there any doc which describe how the default auth of Orchard works ?

sebastienros commented 6 years ago

The default is using the forms authentication cookie middleware that is used by default in ASP.NET. There is some custom logic to make this cookie isolated per tenant, otherwise it works the same.

ghost commented 6 years ago

The default is using the forms authentication cookie middleware that is used by default in ASP.NET.

Hi thanks! there was something a bit confusing about cookies . when i log in and send a request for a content without cookies i get an asp.net auth cookies which log me once again . how is this working .? once i log in and delete all the cookies i get automatically logged in once i request a content . can you explain a bit more please ?

MatteoPiovanelli-Laser commented 6 years ago

Allow me to insert myself here, as I am working on the authentication layer lately.

@bufferz can you explain the steps you are taking? If I clear my cookies I have to log back in to have the .ASPXAUTH cookie set again to my browser.

ghost commented 6 years ago

@MatteoPiovanelli-Laser thanks for joining . 1 - Login ==> 2 - Clear Cookies ==> 3 - Request content /~ ==> Regaining the.ASPXAUTH automatically

MatteoPiovanelli-Laser commented 6 years ago

What version of Orchard are you running? What browser? I don't see that issue on any of the tenants I have an account in, either locally or on our servers.

ghost commented 6 years ago

What version of Orchard are you running? What browser?

I'm using firefox , and the latest version of orchard

MatteoPiovanelli-Laser commented 6 years ago

So far I have not been able to replicate this on any of the Orchard versions I ran. I tried it on 1.10.x, dev, and the hybrid version we have at work.