Arculum
❔ Whats the difference between UseCookieAuthentication and UseCookiePolicy ?
However, I often do use it for httponly default is false and the SiteMode defaults to lax. HttpOnly to true shouldn't affect most web applications. SiteMode we tend to set to strict dissallowing cross-site sharing of the cookie.
7 replies
❔ Whats the difference between UseCookieAuthentication and UseCookiePolicy ?
UseCookiePolicy is not required. It adds options for you such as setting the same site mode of the cookie which controls how the cookie is or is not sent to 3rd party navigations. You can also set the cookie to httponly so that client side scripts can not access the cookie. You can also set a Consent Cookie telling users your use of cookies and they can accept/deny this use of cookies.
7 replies