Skip to content

Commit d37ca7b

Browse files
committed
Refine description of external authentication cookie behavior in IdentityServer docs; remove summary table.
1 parent c49d4e5 commit d37ca7b

1 file changed

Lines changed: 4 additions & 10 deletions

File tree

  • src/content/docs/identityserver/aspnet-identity

src/content/docs/identityserver/aspnet-identity/schemes.md

Lines changed: 4 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -52,10 +52,10 @@ Besides the main application cookie, IdentityServer uses other schemes for speci
5252

5353
### External Authentication (e.g., Google, OIDC)
5454

55-
When a user signs in with an external provider (like Google or another OIDC provider), the result of that remote authentication is temporarily stored in an "external" cookie. This allows your login logic to read the claims from the external provider before fully signing the user into your main local session.
55+
When a user signs in with an external provider (like Google or another OIDC provider), the result of that remote authentication is temporarily stored in an "external" cookie.
56+
This allows your login logic to read the claims from the external provider before fully signing the user into your main local session.
5657

57-
- **Standalone Default:** `"idsrv.external"` (Constant: `IdentityServerConstants.ExternalCookieAuthenticationScheme`)
58-
- **With ASP.NET Identity:** `"Identity.External"` (Constant: `IdentityConstants.ExternalScheme`)
58+
IdentityServer always uses the `"idsrv.external"` scheme here, available in the `IdentityServerConstants.ExternalCookieAuthenticationScheme` constant.
5959

6060
### Check Session Cookie
6161

@@ -64,13 +64,7 @@ The [User Session Service](/identityserver/reference/services/user-session-servi
6464

6565
- **Default Name:** `"idsrv.session"` (Constant: `IdentityServerConstants.DefaultCheckSessionCookieName`). This often remains consistent, but verify your specific configuration.
6666

67-
## Summary Table
68-
69-
| Feature | Standalone IdentityServer | With ASP.NET Identity |
70-
| :----------------------- | :---------------------------------------------------------------------------------------- | :------------------------------------------------------------------- |
71-
| **Main Auth Cookie** | `"idsrv"`<br/>(`IdentityServerConstants.DefaultCookieAuthenticationScheme`) | `"Identity.Application"`<br/>(`IdentityConstants.ApplicationScheme`) |
72-
| **External Auth Cookie** | `"idsrv.external"`<br/>(`IdentityServerConstants.ExternalCookieAuthenticationScheme`) | `"Identity.External"`<br/>(`IdentityConstants.ExternalScheme`) |
73-
| **Typical Usage** | `HttpContext.SignInAsync(IdentityServerConstants.DefaultCookieAuthenticationScheme, ...)` | `SignInManager.SignInAsync(...)` |
67+
Note this cookie is not marked as `HttpOnly`, so it can be accessed in client-side code.
7468

7569
## Common Pitfalls
7670

0 commit comments

Comments
 (0)