CODEWITHSUNDEEP
c#asp.net-core
J.Doe
J.Doe

Reputation: 53

Secure cookies Asp.Net Core

How to secure cookies in asp.net core. Because for now i have cookies in just plain text and everyone can get the data from inspector in browser. Does some handy solution exists for it, so it can encrypt and decrypt cookie value before processing?

context.Response.Cookies.Append("name", "Tom");

Upvotes: 2

Views: 3027

Answers (1)

Mohsen Esmailpour
Mohsen Esmailpour

Reputation: 11554

There are several ways to encrypt and decrypt string and simple one of them is using IDataProtector.

private IDataProtector _protector;

public AccessController(IDataProtectionProvider provider)
{
    _protector = provider.CreateProtector("MySecretKey");
}

public void ActionResult Index()
{
    var protectedName = _protector.Protect("Tom");

    HttpContext.Response.Cookies.Append("name", protectedName);
   .
   . 
   .
}

and use _protector.UnProtect(encryptedString) to decrypt string.

Upvotes: 4

Related Questions