huahaofeng
/
aspnetcore
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

#69 - Properly delete Twitter state cookie.

This commit is contained in:
Chris Ross 2014-10-10 11:54:26 -07:00
parent 2e65a40555
commit 3e88f44552
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/Microsoft.AspNet.Security.Twitter/TwitterAuthenticationHandler.cs
View File

@ -104,7 +104,13 @@ namespace Microsoft.AspNet.Security.Twitter
ClaimsIdentity.DefaultRoleClaimType);
context.Properties = requestToken.Properties;
Response.Cookies.Delete(StateCookie);
var cookieOptions = new CookieOptions
{
HttpOnly = true,
Secure = Request.IsSecure
};
Response.Cookies.Delete(StateCookie, cookieOptions);
await Options.Notifications.Authenticated(context);