Forms Authentication with UserData Problem

[=?Utf-8?B?SGFyZHkgV2FuZw==?=]

Hi all,
I am running ASP.NET 2.0, after login I need to pass CustomerID in my
database instead of username to other pages. I added following code to my
login.aspx

protected void Login_Authentic ate(object sender, AuthenticateEve ntArgs e) {
//FormsAuthentica tion.SignOut();
if (Membership.Val idateUser(Login .UserName, Login.Password) ) {
int customerID = GetCustomerIDBy Username(Login. UserName);
if (customerID 0) {
FormsAuthentica tionTicket ticket = new FormsAuthentica tionTicket(1,
Login.UserName,
DateTime.Now,
DateTime.Now.Ad dMinutes(60),
Login.RememberM eSet,
customerID.ToSt ring(),
FormsAuthentica tion.FormsCooki ePath);

// Encrypt the ticket.
string encTicket = FormsAuthentica tion.Encrypt(ti cket);

// Create the cookie.
Response.Cookie s.Add(new HttpCookie(Form sAuthentication .FormsCookieNam e,
encTicket));

e.Authenticated = true;
} else {
e.Authenticated = false;
}
} else {
e.Authenticated = false;
}
}

Then I have another page to read this cookie, FormsIdentity identity =
Context.User.Id entity as FormsIdentity; I set a break point at this line, and
find out the cookie version is "2" instead of "1" I set in login.aspx. And I
cannot read my userData from cookie, it turns to be blank.

Anybody has idea what is wrong?

Thanks!
--
Regards
Hardy

[=?Utf-8?B?TWlsb3N6IFNrYWxlY2tpIFtNQ0FEXQ==?=]

Hi there,

Login control does the same thing internally (passing String.Empty as user
defined data), please look at the exact code which is executed internally:

private void AttemptLogin()
{
if ((this.Page == null) || this.Page.IsVal id)
{
LoginCancelEven tArgs args1 = new LoginCancelEven tArgs();
this.OnLoggingI n(args1);
if (!args1.Cancel)
{
AuthenticateEve ntArgs args2 = new AuthenticateEve ntArgs();
this.OnAuthenti cate(args2);
if (args2.Authenti cated)
{
FormsAuthentica tion.SetAuthCoo kie(
this.UserNameIn ternal, this.RememberMe Set);
this.OnLoggedIn (EventArgs.Empt y);
this.Page.Respo nse.Redirect(
this.GetRedirec tUrl(), false);
}
else
{
//...
}
}
}
}

Because you're not redirecting after setting authentication cookie, login
control creates another cookie, that overwrites created one (version 2).
Provided code does the same thing so in theory you could redirect to request
page after cookie with custom data has been set:

// amended code you provided
// Create the cookie.
Response.Cookie s.Add(new HttpCookie(Form sAuthentication .FormsCookieNam e,
encTicket));
Response.Redire ct(this.GetRedi rectUrl(), true);

Beware current thread will be aborted, so you won't receive any events
(Login1_LoggedI n, page unload). Otherwise, it is not possible to attach user
data to form authentication cookie (of course when using login control)
without unpacking the ticket in Login.LoggedIn event handler, appending the
custom data and reissuing authentication cookie.

Hope this helps
--
Milosz
"Hardy Wang" wrote:

Hi all,
I am running ASP.NET 2.0, after login I need to pass CustomerID in my
database instead of username to other pages. I added following code to my
login.aspx

protected void Login_Authentic ate(object sender, AuthenticateEve ntArgs e) {
//FormsAuthentica tion.SignOut();
if (Membership.Val idateUser(Login .UserName, Login.Password) ) {
int customerID = GetCustomerIDBy Username(Login. UserName);
if (customerID 0) {
FormsAuthentica tionTicket ticket = new FormsAuthentica tionTicket(1,
Login.UserName,
DateTime.Now,
DateTime.Now.Ad dMinutes(60),
Login.RememberM eSet,
customerID.ToSt ring(),
FormsAuthentica tion.FormsCooki ePath);

// Encrypt the ticket.
string encTicket = FormsAuthentica tion.Encrypt(ti cket);

// Create the cookie.
Response.Cookie s.Add(new HttpCookie(Form sAuthentication .FormsCookieNam e,
encTicket));

e.Authenticated = true;
} else {
e.Authenticated = false;
}
} else {
e.Authenticated = false;
}
}

Then I have another page to read this cookie, FormsIdentity identity =
Context.User.Id entity as FormsIdentity; I set a break point at this line, and
find out the cookie version is "2" instead of "1" I set in login.aspx. And I
cannot read my userData from cookie, it turns to be blank.

Anybody has idea what is wrong?

Thanks!
--
Regards
Hardy