Quantcast
Channel: Security Vulnerability
Viewing all articles
Browse latest Browse all 317

Dot Net Core 2.2 Sign Out issue

$
0
0

Have .Net Core 2.2 MVC application and integrated with Azure AD for userAzure AD. User authentication and sign out is working as expected.

But if we copy the cookies AspNetCore.AzureADCookie, .AspNetCore.AzureADCookieC1, .AspNetCore.AzureADCookieC2 from the authenticated browser session using the EditThisCookie extension and logout then if we import again those copied cookies back into browsers and we are able to access the application. Application trusting the application and login automatically.

I'm using NuGet Microsoft.AspNetCore.Authentication.AzureAD.UI NuGet package

Is this behavior expected?


Viewing all articles
Browse latest Browse all 317

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>