ASP.NET 核心标识未在浏览器中保存 cookie

Question

I have search for a solution now for hours now...so here we go. I have 3 application: 1: API - Here we have the Authentication 2: Admin Client - Works great 2: User Client - Able to login and get Authenticated...but on every request I get the login screen again just as I am not authenticated (I get authenticated when I login). This application dos NOT save a cookie to the browser (admin does)

The client code in Program.cs (this is .net6) are the same in Admin and User apps. Only difference is the cookie name

    var _authenticationSettings = _serviceProvider.GetService<IAuthenticationSettings>();

builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
                      .AddCookie(JwtBearerDefaults.AuthenticationScheme,
                        options => {
                            options.LoginPath = _authenticationSettings.LoginPath;
                            options.AccessDeniedPath = _authenticationSettings.AccessDeniedPath;
                            options.Events = new CookieAuthenticationEvents
                            {
                                // Check if JWT needs refreshment 
                                OnValidatePrincipal = RefreshTokenMonitor.ValidateAsync
                            };
                            options.Cookie.Name = "MainAppCookie";
                        }
                      );

I have used this method in other project and it worked just as it should....the only difference is that it was a .net5 IIS projects.....now I have .net6 running on Kestrel

Any idea what I am doing wrong here...

The cookie gets created:

with this value (not sure where I can find the values inside the cookie..

The cookie is valid for 30 min even when I have set the ExpireTimeSpan to 60 min

Here youy have the cookie status when I have logged in to MainApp client. Above you can see the AdminApp cookie (logged in there earlier)

And here you have the AdminApp cookie status on Login as well..

I must admit... this is really strange

Answer 1

Ok, after many hours on troubleshooting the issue I finally found the error. There was a error in link... is was not calling a URL, is was calling a method:(

<a href="@_manager.LogOut()" class="menu-link px-5">@_localizer["SIGN_OUT"]</a>

should be:

<a href="@Url.Action("LogOut", "Account")" class="menu-link px-5">@_localizer["SIGN_OUT"]</a>