leankit-labs / aspxauth Goto Github PK

Generated the cookie successfully using nodejs but decrypting in c# returns null:

FormsAuthenticationTicket ticket = FormsAuthentication.Decrypt(HttpContext.Current.Request.Cookies[".ASPXAUTH"].Value);

I created a quick test.js file with the following contents & included the validation key and decryption key specified in the entry in my Web.config file.

I'm unsure of what to put for the DOTNET_DECRYPTION_IV. I've tried null as well as the 1st 128 characters in the encrypted cookie. Both values result in authTicket getting set to null.

Any thoughts on what I'm missing?

process.env.DOTNET_VALIDATION_KEY = '[validationkey];
process.env.DOTNET_DECRYPTION_IV = '[?]';
process.env.DOTNET_DECRYPTION_KEY = '[decryptionkey]';

var aspxauth = require( "aspxauth" )( {
    validationMethod: "sha1",
    validationKey: process.env.DOTNET_VALIDATION_KEY,
    decryptionMethod: "aes",
    decryptionIV: process.env.DOTNET_DECRYPTION_IV,
    decryptionKey: process.env.DOTNET_DECRYPTION_KEY,
    validateExpiration: false
} );

var authTicket = aspxauth.decrypt('[aspxauth cookie string]'); 
console.log(authTicket);