search

blowdart / AspNetAuthorizationWorkshop

A workshop for moving through the various new pieces in ASP.NET Core Authorization
Other
1.17k stars 245 forks source link

Compatibility with Old Systems #15

Closed anil-kk closed 8 years ago

anil-kk commented 8 years ago

Hi,

I followed Part-1 and Part-2 videos and also this workshop by @blowdart , they are awesome and well organized. They helped me to quickly gain knowledge about security topic in AspDotNetCore

I have few questions related to Authentication, Please excuse me for writing here as this is related to Authorization. It would be very nice to get some insight in to this topic from Microsoft Secutity Specialists. Certainly answers would be helpful for me and probably for other people like me.

So I start here...

Our Team have few systems built in previous .NET Frameworks that uses FormsAuthToken (Cookie) And we started to build a new system in AspDotNetCore we would like to share the credentials that is being used by other systems seamlessly. So far we could able to decrypt the FormsAuth Cookie following answer by Darrell Tunnell, it was usefull for decryption part, yet needs some work arround encryption.

http://stackoverflow.com/questions/34265117/mvc6-decrypting-a-forms-authentication-cookie-from-another-website

Is there any other alternative way that is built in to AspDotNetCore framework, so that I can seamlessly share the credentials between different systems, like reading(Decryption) them if they already exist or writing(Encryption) them if they do not. In AspDotNetCore I do not see the possibility in sharing MachineKey that is used for Encryption and Decryption of FormsAuthToken(Cookie) from other systems.

Thanks, Anil.

blowdart commented 8 years ago

This sort of question would be better asked on stack overflow, or on asp.net github repo, where more people can benefit from the answer - it's not on topic for here. And it's documented somewhat anyway.

anil-kk commented 8 years ago

@blowdart Excuse me for using this platform, I was desperate to work-this out, The best possibility is to speak to the guys who built it.

I came across this documentation before, my problem is not resolved, probably this documentation is incomplete, some pieces are missing or I could not follow up