cookie authentication security issue

[Yogesh Kadvekar]

If i run the application which in this repository.

I created one user in the application

i login in application all works

i open different browser and open application url

and then in that browser if i copy past the old browser cookies
after that refresh
user getting access to application without login by just copying the cookies of other user

[Brock Allen]

That's how cookies work.

[dewelloper]

If you dont want to use cokie dont use it. Use local storage etc

[Yogesh Kadvekar]

If you dont want to use cokie dont use it. Use local storage etc

ok do you any reference link or example for asp.net core web app

[Dominick Baier]

If you dont want to use cokie dont use it. Use local storage etc

Which would result in the same behavior when copied to a different browser.

This discussion is not related to this library. closing.

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue.