Change idsrv cookie name

[rasander]

Is there a way to change the idsrv cookie name?

I would like to change to __Host-idsrv (according to OWASP advice)

[wcabus]

You can override the CookieAuthenticationOptions for each of the preconfigured IdentityServer cookies by using the Options pattern in .NET. For the "idsrv" cookie, this is how you override those options:

builder.Services.Configure<CookieAuthenticationOptions>(
    IdentityServerConstants.DefaultCookieAuthenticationScheme, options =>
    {
        options.Cookie.Name = "new-idsrv-cookie-name";
    });