MVC 5 Owin 应用程序 cookie 在从 Visual Studio 运行的两个项目之间共享

Question

所以我有两个 MVC5 Web 应用程序的解决方案，都使用 Owin 身份验证。 当我通过 Visual Studio 2015 同时运行这两个应用程序时，owin 上下文是共享的（不应该这样！）

共享是指每当我向其中一个应用程序添加声明时，它也会添加到另一个应用程序中。这导致 User.Identity.GetUserId() 返回我上次登录的应用程序的 UserId，即使这两个应用程序彼此无关，并且彼此之间没有引用。

我使用默认的 Owin 设置：

    public void ConfigureAuth(IAppBuilder app)
    {
        // Configure the db context, user manager and signin manager to use a single instance per request
        app.CreatePerOwinContext(ApplicationDbContext.Create);
        app.CreatePerOwinContext<ApplicationUserManager>(ApplicationUserManager.Create);
        app.CreatePerOwinContext<ApplicationSignInManager>(ApplicationSignInManager.Create);

        // Enable the application to use a cookie to store information for the signed in user
        // and to use a cookie to temporarily store information about a user logging in with a third party login provider
        // Configure the sign in cookie
        app.UseCookieAuthentication(new CookieAuthenticationOptions
        {
            AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie,
            LoginPath = new PathString("/Login"),
            Provider = new CookieAuthenticationProvider
            {
                // Enables the application to validate the security stamp when the user logs in.
                // This is a security feature which is used when you change a password or add an external login to your account.  
                OnValidateIdentity = SecurityStampValidator.OnValidateIdentity<ApplicationUserManager, ApplicationUser>(
                    validateInterval: TimeSpan.FromMinutes(30),
                    regenerateIdentity: (manager, user) => user.GenerateUserIdentityAsync(manager))
            }
        });            
        app.UseExternalSignInCookie(DefaultAuthenticationTypes.ExternalCookie);

        // Enables the application to temporarily store user information when they are verifying the second factor in the two-factor authentication process.
        app.UseTwoFactorSignInCookie(DefaultAuthenticationTypes.TwoFactorCookie, TimeSpan.FromMinutes(5));

        // Enables the application to remember the second login verification factor such as phone or email.
        // Once you check this option, your second step of verification during the login process will be remembered on the device where you logged in from.
        // This is similar to the RememberMe option when you log in.
        app.UseTwoFactorRememberBrowserCookie(DefaultAuthenticationTypes.TwoFactorRememberBrowserCookie);

    }

有人可以帮我配置我的应用程序，这样他们就不会共享应用程序 cookie 吗？

Answer 1

更改CookieName in CookieAuthenticationOptions

确定用于保持身份的 cookie 名称。默认值为“.AspNet.Cookies”。如果您更改 AuthenticationType 的名称，则应更改此值，尤其是在您的系统多次使用 cookie 身份验证中间件时。

app.UseCookieAuthentication(new CookieAuthenticationOptions
{
    CookieName = "AspNet.AppName"
}