Owin authentication between MVC 5 and Web API (separate IIS applications)

Question

I have a working app with MVC5 and Web API (both different IIS applications) using Forms Authentication and Bearer token. Yes, they must remain two separate IIS applications. I am using the auth token as the username in my Forms Authentication cookie and that's how I am able to pass the token back and forth from MVC and Web API.

I am also using Asp.net Identity 2.0.

I would like to take Forms Authentication out of the equation and just use Owin Authentication but the User.Identity.IsAuthenticate is always false in my MVC app when I do have a Bearer Token issued.

Can anyone point me to code showing how I can remember auth token between MVC and Web API w/o Forms Authentication?

Taiseer Joudeh · Accepted Answer · 2014-09-28 03:41:06Z

1

All your machineyKey on web..config should be the unified, do not generate machineKey using any online tool, please generate them using power-shell. You can find more about this by reading my blog post here.

answered Sep 28, 2014 at 3:41

Taiseer Joudeh

9,0731 gold badge44 silver badges45 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Community · Accepted Answer · 2017-05-23 12:17:25Z

0

All machineKey of your webconfig files must be the same for domains that will share athentication.

Check this answer about how to set it.

edited May 23, 2017 at 12:17

CommunityBot

11 silver badge

answered Sep 19, 2014 at 21:45

Xavier Egea

4,7633 gold badges27 silver badges39 bronze badges

Collectives™ on Stack Overflow

Owin authentication between MVC 5 and Web API (separate IIS applications)

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related