Generating a new ASP.NET session in the current HTTPContext
As a result of a penetration test against some of our products in the pipeline, what looked to be at the time an ‘easy’ problem to fix is turning out to be a toughy.
httpsession
Can OWIN middleware use the http session?
I had a little bit of code that I was duplicating for ASP.NET and SignalR and I decided to rewrite it as OWIN middleware to remove this duplication.