What to do with Authentication/Session Timeout?

[Simon Says]

Hi,

I've a login page in which after authenticating it via the Oracle DB, I will
stored the user information into the Session. However, when the Session
timeout occurs, all of the user information will be lost.

I've tried doing a Reponse.Redirec t call back to my login page whenever I
detected the Session is null, but I kept getting the exception saying "...
Redirect not all in Page Callback".

Could anyone give me some pointer how I should approach this issue.

Thanks,
Simon

[Mark Rae]

"Simon Says" <si******@gmail .comwrote in message
news:eq******** ******@TK2MSFTN GP04.phx.gbl...

I've a login page in which after authenticating it via the Oracle DB, I
will stored the user information into the Session. However, when the
Session timeout occurs, all of the user information will be lost.

I've tried doing a Reponse.Redirec t call back to my login page whenever I
detected the Session is null, but I kept getting the exception saying "...
Redirect not all in Page Callback".

Could anyone give me some pointer how I should approach this issue.

Have you tried Server.Transfer instead of Response.Redire ct...?

[Simon Says]

Yes. Tried that and am still getting the same error message.

I've alot of client side javascripting in my code. I placed my Redirect call
in the Page_Load event in the .vb code. When the javascript code triggered
the Redirect, I'll have the error. But, when I execute a server control
event, like a clicking a button that do a postback, my Redirect works fine.

--Simon
"Mark Rae" <ma**@markNOSPA Mrae.comwrote in message
news:eg******** ******@TK2MSFTN GP02.phx.gbl...

"Simon Says" <si******@gmail .comwrote in message
news:eq******** ******@TK2MSFTN GP04.phx.gbl...

>I've a login page in which after authenticating it via the Oracle DB, I
will stored the user information into the Session. However, when the
Session timeout occurs, all of the user information will be lost.

I've tried doing a Reponse.Redirec t call back to my login page whenever I
detected the Session is null, but I kept getting the exception saying
"... Redirect not all in Page Callback".

Could anyone give me some pointer how I should approach this issue.

Have you tried Server.Transfer instead of Response.Redire ct...?

[Mark Rae]

"Simon Says" <si******@gmail .comwrote in message
news:eS******** ******@TK2MSFTN GP04.phx.gbl...

I've alot of client side javascripting in my code.

OK.

I placed my Redirect call in the Page_Load event in the .vb code.

Ah - that might explain it...Does your page have other Page events (e.g.
Page_Init, Page_Prerender, Page_Unload etc)...

I've encountered similar issues with Response.Redire ct - e.g. if you place
Response.Redire ct in your Page_Init method, the Page_Load method will still
fire, but if you use Server.Transfer , the transfer will happen
immediately...

When the javascript code triggered the Redirect, I'll have the error.

??? What do you mean exactly - how is your client-side JavaScript making a
call to Response.Redire ct...?

Generally speaking, I do all of this stuff in a base class which all pages
inherit, or which the MasterPage(s) inherit(s):

public class BaseMasterEvent s : Page
{
public BaseMasterEvent s()
{
this.PreInit += new EventHandler(Ba seMaster_PreIni t);
}

private void BaseMaster_PreI nit(object sender, EventArgs e)
{
if (Session.IsNewS ession)
{
Server.Transfer ("~/sessionTimedOut .htm", false);
}
}
}

[Simon Says]

Yes. My page does has Page_init, and Page_Load events.

I'm working with some controls with AJAX functionality. Basically the tree
node click, in AJAX, will invoke a grid event in the server side to query
from DB, and display out the results ... all without having the page to
refresh. But, the page events still follows as if it's a postback action.So
.... when I do a tree node click, it will
1. Page_init
2. Page_load
3. grid_Initialize DataSource (this query the DB)
4. Page_init
5. Page_load

I've placed my session checking in the Page_Init event, and tried both
Redirect and Server.Transfer ; and both giving me the same exception. I've
also tried your suggestion and do it in my master page PreInit event, and
I'm also getting the same exception.

I got desparate and tried ClientScript.Re gisterStartUpSc ript to do a
"window.locatio n.replace(login .aspx)" and it too doesn't do anything.

--Simon
"Mark Rae" <ma**@markNOSPA Mrae.comwrote in message
news:Op******** ******@TK2MSFTN GP06.phx.gbl...

"Simon Says" <si******@gmail .comwrote in message
news:eS******** ******@TK2MSFTN GP04.phx.gbl...

>I've alot of client side javascripting in my code.

OK.

>I placed my Redirect call in the Page_Load event in the .vb code.

Ah - that might explain it...Does your page have other Page events (e.g.
Page_Init, Page_Prerender, Page_Unload etc)...

I've encountered similar issues with Response.Redire ct - e.g. if you place
Response.Redire ct in your Page_Init method, the Page_Load method will
still fire, but if you use Server.Transfer , the transfer will happen
immediately...

>When the javascript code triggered the Redirect, I'll have the error.

??? What do you mean exactly - how is your client-side JavaScript making a
call to Response.Redire ct...?

Generally speaking, I do all of this stuff in a base class which all pages
inherit, or which the MasterPage(s) inherit(s):

public class BaseMasterEvent s : Page
{
public BaseMasterEvent s()
{
this.PreInit += new EventHandler(Ba seMaster_PreIni t);
}

private void BaseMaster_PreI nit(object sender, EventArgs e)
{
if (Session.IsNewS ession)
{
Server.Transfer ("~/sessionTimedOut .htm", false);
}
}
}

[Mat]

why dont you increase the timeout in web.config?

"Simon Says" <si******@gmail .comwrote in message
news:eq******** ******@TK2MSFTN GP04.phx.gbl...

Hi,

I've a login page in which after authenticating it via the Oracle DB, I
will stored the user information into the Session. However, when the
Session timeout occurs, all of the user information will be lost.

I've tried doing a Reponse.Redirec t call back to my login page whenever I
detected the Session is null, but I kept getting the exception saying "...
Redirect not all in Page Callback".

Could anyone give me some pointer how I should approach this issue.

Thanks,
Simon

[Mark Rae]

"Simon Says" <si******@gmail .comwrote in message
news:%2******** ********@TK2MSF TNGP06.phx.gbl. ..

Yes. My page does has Page_init, and Page_Load events.

Ah...

I'm working with some controls with AJAX functionality. Basically the tree
node click, in AJAX, will invoke a grid event in the server side to query
from DB, and display out the results ... all without having the page to
refresh. But, the page events still follows as if it's a postback
action.So ... when I do a tree node click, it will
1. Page_init
2. Page_load
3. grid_Initialize DataSource (this query the DB)
4. Page_init
5. Page_load

You appear to be loading the page twice - why do steps 4 and 5 occur?

I've placed my session checking in the Page_Init event, and tried both
Redirect and Server.Transfer ; and both giving me the same exception. I've
also tried your suggestion and do it in my master page PreInit event, and
I'm also getting the same exception.

Hmm - MasterPages don't have a PreInit event, so I'm assuming you're doing
the same Page inheritance stuff as I am...

I'm starting to run out of ideas now...

[Mark Rae]

"Mat" <Ma*******@hotm ail.comwrote in message
news:xo******** ************@we ber.videotron.n et...

why dont you increase the timeout in web.config?

ROTFLMAO!!!

When you get a warning light in your car, do you just do the Homer Simpson
fix by putting a strip of tape over it...?

[Simon Says]

Well ... coz my boss disagree to it :-)

I'm using a longer timeout for a temp. fix now, but ... the site just feels
more professional if it can re-direct whenever the timeout occurs.

"Mat" <Ma*******@hotm ail.comwrote in message
news:xo******** ************@we ber.videotron.n et...

why dont you increase the timeout in web.config?

"Simon Says" <si******@gmail .comwrote in message
news:eq******** ******@TK2MSFTN GP04.phx.gbl...

>Hi,

I've a login page in which after authenticating it via the Oracle DB, I
will stored the user information into the Session. However, when the
Session timeout occurs, all of the user information will be lost.

I've tried doing a Reponse.Redirec t call back to my login page whenever I
detected the Session is null, but I kept getting the exception saying
"... Redirect not all in Page Callback".

Could anyone give me some pointer how I should approach this issue.

Thanks,
Simon

[Simon Says]

I think step 4 and 5 occurs coz the initializeDataS ource event. In step 3, I
got the dataset and stored it in the Cache, then in Step5, I assigned the
dataset from the Cache and blind it to my grid.

Ya ... I've the PreInit in the child page; not in the master page.

Man ... this web development thinggy is not as easy as I though. Thanks for
all your ideas though.
"Mark Rae" <ma**@markNOSPA Mrae.comwrote in message
news:uR******** ******@TK2MSFTN GP04.phx.gbl...

"Simon Says" <si******@gmail .comwrote in message
news:%2******** ********@TK2MSF TNGP06.phx.gbl. ..

>Yes. My page does has Page_init, and Page_Load events.

Ah...

>I'm working with some controls with AJAX functionality. Basically the
tree node click, in AJAX, will invoke a grid event in the server side to
query from DB, and display out the results ... all without having the
page to refresh. But, the page events still follows as if it's a postback
action.So ... when I do a tree node click, it will
1. Page_init
2. Page_load
3. grid_Initialize DataSource (this query the DB)
4. Page_init
5. Page_load

You appear to be loading the page twice - why do steps 4 and 5 occur?

>I've placed my session checking in the Page_Init event, and tried both
Redirect and Server.Transfer ; and both giving me the same exception. I've
also tried your suggestion and do it in my master page PreInit event, and
I'm also getting the same exception.

Hmm - MasterPages don't have a PreInit event, so I'm assuming you're doing
the same Page inheritance stuff as I am...

I'm starting to run out of ideas now...