How to use OAuth in a C# web api app when hosting multiple instances
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have a C# web API application, which is using OAuth and annotations such as:
[Authorize(Roles = "admin")]
I'm hosting it on AWS elastic beanstalk. It works fine when there is 1 instance running, but when I started to have multiple instances, I was getting unauthorised messages returned. Clearly the tokens are not valid across multiple machines.
Is there a way that I can add some configuration to the instances so that they accept tokens that have been generated on a different machine?
oauth-2.0 asp.net-web-api2 amazon-elastic-beanstalk
edited Nov 15 '18 at 17:37
marc_s
586k13011281273
asked Nov 15 '18 at 17:30
SamSam
2,33621942
add a comment |
I have a C# web API application, which is using OAuth and annotations such as:
[Authorize(Roles = "admin")]
I'm hosting it on AWS elastic beanstalk. It works fine when there is 1 instance running, but when I started to have multiple instances, I was getting unauthorised messages returned. Clearly the tokens are not valid across multiple machines.
Is there a way that I can add some configuration to the instances so that they accept tokens that have been generated on a different machine?
oauth-2.0 asp.net-web-api2 amazon-elastic-beanstalk
edited Nov 15 '18 at 17:37
marc_s
586k13011281273
asked Nov 15 '18 at 17:30
SamSam
2,33621942
add a comment |
I have a C# web API application, which is using OAuth and annotations such as:
[Authorize(Roles = "admin")]
I'm hosting it on AWS elastic beanstalk. It works fine when there is 1 instance running, but when I started to have multiple instances, I was getting unauthorised messages returned. Clearly the tokens are not valid across multiple machines.
Is there a way that I can add some configuration to the instances so that they accept tokens that have been generated on a different machine?
oauth-2.0 asp.net-web-api2 amazon-elastic-beanstalk
edited Nov 15 '18 at 17:37
marc_s
586k13011281273
asked Nov 15 '18 at 17:30
SamSam
2,33621942
I have a C# web API application, which is using OAuth and annotations such as:
[Authorize(Roles = "admin")]
I'm hosting it on AWS elastic beanstalk. It works fine when there is 1 instance running, but when I started to have multiple instances, I was getting unauthorised messages returned. Clearly the tokens are not valid across multiple machines.
Is there a way that I can add some configuration to the instances so that they accept tokens that have been generated on a different machine?
oauth-2.0 asp.net-web-api2 amazon-elastic-beanstalk
oauth-2.0 asp.net-web-api2 amazon-elastic-beanstalk
edited Nov 15 '18 at 17:37
marc_s
586k13011281273
asked Nov 15 '18 at 17:30
SamSam
2,33621942
edited Nov 15 '18 at 17:37
marc_s
586k13011281273
asked Nov 15 '18 at 17:30
SamSam
2,33621942
edited Nov 15 '18 at 17:37
marc_s
586k13011281273
edited Nov 15 '18 at 17:37
marc_s
586k13011281273
edited Nov 15 '18 at 17:37
marc_s
586k13011281273
586k13011281273
asked Nov 15 '18 at 17:30
SamSam
2,33621942
asked Nov 15 '18 at 17:30
SamSam
2,33621942
asked Nov 15 '18 at 17:30
SamSam
2,33621942
2,33621942
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
You can set the MachineKey in web.config which can be used to share tokens between multiple machines.
<machineKey decryption="AES" decryptionKey="..." validation="HMACSHA256" validationKey="..." />
The script to generate the machine key can be found here.
answered Nov 16 '18 at 9:59
SamSam
2,33621942
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53324964%2fhow-to-use-oauth-in-a-c-sharp-web-api-app-when-hosting-multiple-instances%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
You can set the MachineKey in web.config which can be used to share tokens between multiple machines.
<machineKey decryption="AES" decryptionKey="..." validation="HMACSHA256" validationKey="..." />
The script to generate the machine key can be found here.
answered Nov 16 '18 at 9:59
SamSam
2,33621942
add a comment |
You can set the MachineKey in web.config which can be used to share tokens between multiple machines.
<machineKey decryption="AES" decryptionKey="..." validation="HMACSHA256" validationKey="..." />
The script to generate the machine key can be found here.
answered Nov 16 '18 at 9:59
SamSam
2,33621942
add a comment |
You can set the MachineKey in web.config which can be used to share tokens between multiple machines.
<machineKey decryption="AES" decryptionKey="..." validation="HMACSHA256" validationKey="..." />
The script to generate the machine key can be found here.
answered Nov 16 '18 at 9:59
SamSam
2,33621942
You can set the MachineKey in web.config which can be used to share tokens between multiple machines.
<machineKey decryption="AES" decryptionKey="..." validation="HMACSHA256" validationKey="..." />
The script to generate the machine key can be found here.
answered Nov 16 '18 at 9:59
SamSam
2,33621942
answered Nov 16 '18 at 9:59
SamSam
2,33621942
answered Nov 16 '18 at 9:59
SamSam
2,33621942
answered Nov 16 '18 at 9:59
SamSam
2,33621942
2,33621942
add a comment |
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53324964%2fhow-to-use-oauth-in-a-c-sharp-web-api-app-when-hosting-multiple-instances%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
