asp.net – Azure AD B2C – 多个子域

app.UseCookieAuthentication(new CookieAuthenticationOptions(){CookieDomain =“.mytest.com”});

当我读到这篇文章时,我想通了：https://auth0.com/blog/2014/01/27/ten-things-you-should-know-about-tokens-and-cookies/(第3节)

public void ConfigureAuth(IAppBuilder app)
    {
        app.SetDefaultSignInAsAuthenticationType(CookieAuthenticationDefaults.AuthenticationType);

        app.UseCookieAuthentication(new CookieAuthenticationOptions() { CookieDomain = ".mytest.com"});

        var options = new OpenIdConnectAuthenticationOptions
        {
            ClientId = clientIdb2c,RedirectUri = redirectUri,PostLogoutRedirectUri = redirectUri,Notifications = new OpenIdConnectAuthenticationNotifications()
            {
                MessageReceived = (context) =>
                {

                    //AADB2C90091: The user has cancelled entering self-asserted information.
                    if (!string.IsNullOrEmpty(context.ProtocolMessage.ErrorDescription) && !context.ProtocolMessage.ErrorDescription.StartsWith("AADB2C90091:",StringComparison.OrdinalIgnoreCase))
                    {
                        if (context.ProtocolMessage.ErrorDescription.StartsWith("AADB2C99002",StringComparison.OrdinalIgnoreCase))
                        {
                            throw new SecurityTokenValidationException("User does not exist. Please sign up before you can sign in.");
                        }
                    }

                    return Task.FromResult(0);
                },RedirectToIdentityProvider = OnRedirectToIdentityProvider,AuthenticationFailed = AuthenticationFailed,SecurityTokenValidated = (context) =>
                {
                    //Create the logic to redirect here.
                    context.AuthenticationTicket.Properties.RedirectUri = "https://sub1.mytest.com";

                    return Task.FromResult(0);
                }
            },Scope = "openid offline_access",ResponseType = "id_token",// The PolicyConfigurationManager takes care of getting the correct Azure AD authentication
            // endpoints from the OpenID Connect metadata endpoint.  It is included in the PolicyAuthHelpers folder.
            ConfigurationManager = new PolicyConfigurationManager(
                String.Format(CultureInfo.InvariantCulture,aadInstance,tenant,"/v2.0",OIDCMetadataSuffix),new string[] { SignUpPolicyId,SignInPolicyId,ProfilePolicyId }),};

        app.USEOpenIdConnectAuthentication(options);
    }