This is cookie/URL-based authentication in which a username and password are stored on the client machine as cookies and are sent encrypted in the URL for every request if the user has turned off cookie support. We can implement this in ASP.NET Core 2.0 as cookie authentication, as illustrated in the following diagram:
As we can see, once we have the auth-key set with the initial call to authenticate, we just pass the session ID/token from the cookie in every request. It can be used with ASP.NET Core Identity or without it. ASP.NET Core Identity is a membership system that allows us to add login functionality to our web ...
