By default authentication tickets cannot be shared between .NET Core and OWIN. The good news is that it is possible but we have to take some extra steps:
.NET Core App
On .NET Core side we have to change the cookie authentication middleware:
- The cookie name should match the name used by the OWIN Cookie Authentication Middleware (.AspNet.SharedCookiefor example).
- An instance of a DataProtectionProvidershould be initialized to the common data protection key storage location.
ASP.NET (OWIN) App
On ASP.NET (OWIN) side we have to install the Microsoft.Owin.Security.Interop package first.
Then we can change the cookie authentication middleware:
- The cookie name should match the name used by the ASP.NET Core Cookie Authentication Middleware (.AspNet.SharedCookiein the example).
- An instance of a DataProtectionProvidershould be initialized to the common data protection key storage location.