ASP.NET sees the session cookie and loads the session (or doesn't, and starts a new one). This is why people recommend serving static, unauthenticated resources like images from a separate domain.
You have a number of different ways to store and retrieve data between requests in ASP.NET Core MVC applications. Here’s how to take advantage of them. Because HTTP is a stateless protocol, state ...