Authentication Ticket not storing UserData

[Sean Patterson]

Hey all,

I've followed the examples online on how to use Forms Authentication to
create a ticket, assign it a role, and then intercept it in the
Global.asax file to make sure it gets sucked in to the IPrincipal. This
has worked on some other apps, but my code isn't working in my new one
for some reason. Here's my CreateCredentia ls code:

Private Sub CreateCredentia ls(ByVal UserID As String, ByVal UserRole As
String)

Dim CurrentContext As HttpContext
Dim FormsCookie As String
Dim AuthCookie As HttpCookie
Dim Ticket As System.Web.Secu rity.FormsAuthe nticationTicket
Dim AuthIdentity As System.Web.Secu rity.FormsIdent ity
Dim MinutesUntilExp iration As Double

CurrentContext = HttpContext.Cur rent
' The session timeout limit is defined in the web.config file
MinutesUntilExp iration =
CType(Configura tionSettings.Ap pSettings("WLTT imeOutMinutes") , Double)
Ticket = New System.Web.Secu rity.FormsAuthe nticationTicket (1,
UserID, DateTime.Now, _

DateTime.Now.Ad dMinutes(Minute sUntilExpiratio n), _
False,
UserRole)

' Add ticket into user's cookie list and put the ticket into the
user's HTTP Context
FormsCookie = System.Web.Secu rity.FormsAuthe ntication.Encry pt(Ticket)
AuthCookie = New
HttpCookie(Syst em.Web.Security .FormsAuthentic ation.FormsCook ieName,
FormsCookie)
CurrentContext. Response.Cookie s.Add(AuthCooki e)

End Sub

Similarly, in my global.asax I have the following

Sub Application_Aut henticateReques t(ByVal sender As Object, ByVal e As
EventArgs)
' Fires upon attempting to authenticate the user

Dim id As System.Web.Secu rity.FormsIdent ity
Dim ticket As System.Web.Secu rity.FormsAuthe nticationTicket

' Update authentication ticket greated during login to include
the user's role in its credentials.
If Not HttpContext.Cur rent.User Is Nothing Then
If HttpContext.Cur rent.User.Ident ity.IsAuthentic ated Then
If TypeOf HttpContext.Cur rent.User.Ident ity Is
System.Web.Secu rity.FormsIdent ity Then
id = CType(HttpConte xt.Current.User .Identity,
System.Web.Secu rity.FormsIdent ity)
ticket = id.Ticket
Dim UserRole() As String = {""}
UserRole(0) = ticket.UserData
HttpContext.Cur rent.User = New
System.Security .Principal.Gene ricPrincipal(id , UserRole)
End If
End If
End If

End Sub

For some reason, when I debug, I trace the script through the create
credentials striaght into the application_aut hentication, but the
UserData doesn't go with it. Here is my debug info:

Login Form:
?Ticket
{System.Web.Sec urity.FormsAuth enticationTicke t}
CookiePath: "/"
Expiration: #1/24/2005 4:12:16 PM#
Expired: False
IsPersistent: False
IssueDate: #1/24/2005 3:52:16 PM#
Name: "spatterson "
UserData: "USER"
Version: 1

Global.asax
{System.Web.Sec urity.FormsAuth enticationTicke t}
CookiePath: "/"
Expiration: #1/24/2005 4:22:32 PM#
Expired: False
IsPersistent: False
IssueDate: #1/24/2005 3:52:32 PM#
Name: "spatterson "
UserData: ""
Version: 1

Any help to what I'm missing? I've even cleared out my cookies in IE to
test things. Thanks in advance!