huahaofeng
/
aspnetcore
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Properly delete the correlation cookie. See Katana #230.

This commit is contained in:
Chris Ross 2014-09-09 16:17:46 -07:00
parent b10cda80a7
commit a9e40ac895
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/Microsoft.AspNet.Security/Infrastructure/AuthenticationHandler.cs
View File

@ -362,7 +362,12 @@ namespace Microsoft.AspNet.Security.Infrastructure
return false; return false;
} }
Response.Cookies.Delete(correlationKey); var cookieOptions = new CookieOptions
{
HttpOnly = true,
Secure = Request.IsSecure
};
Response.Cookies.Delete(correlationKey, cookieOptions);
string correlationExtra; string correlationExtra;
if (!properties.Dictionary.TryGetValue( if (!properties.Dictionary.TryGetValue(