Skip to content

Commit

Permalink
Update cookie auth details. (#1022)
Browse files Browse the repository at this point in the history
* Update cookie auth details. Fixes #716

* Clean up text
  • Loading branch information
IEvangelist authored Jun 2, 2024
1 parent a4bdc57 commit 3ce37ff
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
4 changes: 2 additions & 2 deletions docs/fundamentals/dashboard/explore.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: Explore .NET Aspire dashboard
description: Explore the .NET Aspire dashboard features through the .NET Aspire Starter app.
ms.date: 05/18/2024
ms.date: 05/31/2024
ms.topic: reference
---

Expand Down Expand Up @@ -39,7 +39,7 @@ After copying the token from the console and pasting it into the login page, sel

:::image type="content" source="media/explore/aspire-login-filled.png" lightbox="media/explore/aspire-login-filled.png" alt-text=".NET Aspire dashboard login page with the token pasted into the textbox.":::

The dashboard persists the token as a browser session cookie. Session cookies are temporary and only valid for the session. If you close the browser, the session cookie is deleted, and you'd need to log in again. For more information, see [Security considerations for running the .NET Aspire dashboard](security-considerations.md).
The dashboard persists the token as a browser persistent cookie, which remains valid for three days. Persistent cookies have an expiration date and remain valid even after closing the browser. This means that users don't need to log in again if they close and reopen the browser. For more information, refer to the [Security considerations for running the .NET Aspire dashboard](security-considerations.md) documentation.

## Resources page

Expand Down
4 changes: 2 additions & 2 deletions docs/fundamentals/dashboard/security-considerations.md
Original file line number Diff line number Diff line change
@@ -1,13 +1,13 @@
---
title: .NET Aspire dashboard security considerations
description: Security considerations for running the .NET Aspire dashboard
ms.date: 05/30/2024
ms.date: 05/31/2024
ms.topic: reference
---

# Security considerations for running the .NET Aspire dashboard

The [.NET Aspire dashboard](overview.md) offers powerful insights to your apps. The dashboard displays information about resources, including their configuration, console logs and in-depth telemtry.
The [.NET Aspire dashboard](overview.md) offers powerful insights to your apps. The dashboard displays information about resources, including their configuration, console logs and in-depth telemetry.

Data displayed in the dashboard can be sensitive. For example, configuration can include secrets in environment variables, and telemetry can include sensitive runtime data. Care should be taken to secure access to the dashboard.

Expand Down

0 comments on commit 3ce37ff

Please sign in to comment.