According to ASP.NET Core documentation the method HttpContext.Authentication.SignOutAsync()
must delete the authentication cookie as well.
Here's the code that deletes the cookie (If nothing else helps, use brute force):
await this.HttpContext.Authentication.SignOutAsync();
// ...
var cookie = this.Request.Cookies[];
if (cookie != null)
{
var options = new CookieOptions { Expires = DateTime.Now.AddDays(-1) };
this.Response.Cookies.Append(cookieName, cookie, options);
}
Bad, bad, bad! Seems like a very ugly patch! But works... :(
Any other solutions?