I have a Web application that have simple Authentication, User table with Hash password and salt, Role and User Role table, the application is older application with asp.net. I am working on new standalone application in .net core.
I am going to have a link in first application by clicking on that I would pass login and user will login Automatically instead of going to login page,
Also user can go to the login page and login, so I will get the user info and Role from same Database and tables. What is the best way to approach this?
1- Do I need to use any Authentication approaches like Identity sever, Owin,….
2- Or I can simply generate a token in first application save that in user table
along with user info and token expiration date, in second application check for
that token and if it is valid I log he user if not redirect to login page?