Multi-tenant ASP.NET Core app - configuring authentication

[brokul-dev]

This issue contains comments displayed below the article:
https://brokul.dev/multi-tenant-asp-net-core-app-configuring-authentication

[adospace]

Exceptional informative content, thanks for sharing,

Would the flow be the same for the JWT bearer authentication scheme? I need to make multitenant a SPA application + API so I thought of a JWT bearer token...

BTW your blog is full of interesting articles, keep up the good work!

[brokul-dev]

Hi @adospace,
Yes, you can use the same trick for any authentication scheme. I do it this way in my other apps for the OpenID Connect authentication scheme.

Thanks for your comment!

[tlentine]

Great post! Any chance you have an example with OpenIdConnect? I'm struggling to get a solution working where the cookie's path reflects the tenant's path in the url.

[brokul-dev]

Hi @tlentine, thanks for your comment!
Unfortunately, I don't have any ready-to-use samples. Could you provide more context or share your code that is not working?

[tlentine]

Let me see if I can put together a minimal repo this weekend - I feel like I'm missing something really simple that isn't quite trivial : )

[terryaney]

Can you do this same concept with Session Cookie Name? Or is that not even needed...trying to think through if you'd ever have two tenant's session cookies colliding or if they would always be in separate tabs/isolation.

In any case, if they could collide, maybe you've dealt with already and thought of a solution? And if so, another gotcha, I've been tasked to register an OnSigningOut handler that deletes both the session and authentication cookies, so if something was done with session cookie names, I'd need to be able to access it inside your IConfigureOptions<CookieAuthenticationOptions> callback.

Thanks for the great article/information.