Chris Ross

FYI DotNetCore.2.0.6-WindowsHosting is now available with at least one ANCM AV fix.

AuthenticationType must be unique for each instance of UseCookieAuthentication and should be passed to sign-in to avoid conflicts.

Ah, I understand now, but I don't see how you can separate these here. This was addressed in the ASP.NET Core versions of this library by changing the design of...

You're able to work around it by setting RedirectUri = "/OwinFbDemo/securepage", correct? The awkward bit is that if we fixed it anybody that had used this workaround would break.

Virtual directory or sub application? They behave quite differently.

The error=access_denied parameter is fishy, that would be coming from the external MSA server. It sounds like an app registration problem in MSA.

The general recommendation is to use middleware to modify the request properties like Host to match the public values, then everything generated from them is correct. Even better, the proxy...

UseForwardedHeaders is a tool that reads x-fowarded-* headers from the request and updates the associated scheme, host, etc. fields on the request. You can do the same in your own...

I've made a correction to the sample code above. It used to read: ``` private void CheckSameSite(HttpContext httpContext, CookieOptions options) { if (options.SameSite > SameSiteMode.Unspecified) { ``` But the corrected...

## Patches See https://devblogs.microsoft.com/dotnet/net-core-November-2019/ for information on the November 2.1.14, 2.2.8, and 3.0.1 patches that included these changes. ## ASP.NET Core 2.1 or 2.2 on .NET Framework: ASP.NET Core and...