473,395 Members | 2,006 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,395 software developers and data experts.

Forms Authentication question

Hi buddies,

I have a question.

I want to use the forms authentication in my web app.

My user login. The cookie is stored in the client machine and some
important information is stored in session variables.

What will happen if the user closes the browser and reopen to relog in
the application? I mean, the cookie is not expired yet so the login is
automatic, but, I have no session informations consequently my app
should fail (I assume).

Am I missing something or I have to create a workaround to bypass this
situation?

Thanks in advance

Stefano Mostarda
Rome Italy

Nov 17 '05 #1
6 1334
What you can do is, in the session_end you can delete formauthentication
cookie by using signout method of formsauthentication.

--
Saravana
Microsoft MVP - ASP.NET
www.extremeexperts.com

"Stefano Mostarda" <st**************@fastwebnet.it> wrote in message
news:Ot**************@TK2MSFTNGP09.phx.gbl...
Hi buddies,

I have a question.

I want to use the forms authentication in my web app.

My user login. The cookie is stored in the client machine and some
important information is stored in session variables.

What will happen if the user closes the browser and reopen to relog in
the application? I mean, the cookie is not expired yet so the login is
automatic, but, I have no session informations consequently my app
should fail (I assume).

Am I missing something or I have to create a workaround to bypass this
situation?

Thanks in advance

Stefano Mostarda
Rome Italy

Nov 17 '05 #2
What you can do is, in the session_end you can delete formauthentication
cookie by using signout method of formsauthentication.

--
Saravana
Microsoft MVP - ASP.NET
www.extremeexperts.com

"Stefano Mostarda" <st**************@fastwebnet.it> wrote in message
news:Ot**************@TK2MSFTNGP09.phx.gbl...
Hi buddies,

I have a question.

I want to use the forms authentication in my web app.

My user login. The cookie is stored in the client machine and some
important information is stored in session variables.

What will happen if the user closes the browser and reopen to relog in
the application? I mean, the cookie is not expired yet so the login is
automatic, but, I have no session informations consequently my app
should fail (I assume).

Am I missing something or I have to create a workaround to bypass this
situation?

Thanks in advance

Stefano Mostarda
Rome Italy

Nov 17 '05 #3
Don't persist the cookie.

FormsAuthentication.SetAuthCookie(userId.ToString( ), false)

m.

--------------------

"Stefano Mostarda" <st**************@fastwebnet.it> wrote in message
news:Ot**************@TK2MSFTNGP09.phx.gbl...
Hi buddies,

I have a question.

I want to use the forms authentication in my web app.

My user login. The cookie is stored in the client machine and some
important information is stored in session variables.

What will happen if the user closes the browser and reopen to relog in
the application? I mean, the cookie is not expired yet so the login is
automatic, but, I have no session informations consequently my app
should fail (I assume).

Am I missing something or I have to create a workaround to bypass this
situation?

Thanks in advance

Stefano Mostarda
Rome Italy

Nov 17 '05 #4
Don't persist the cookie.

FormsAuthentication.SetAuthCookie(userId.ToString( ), false)

m.

--------------------

"Stefano Mostarda" <st**************@fastwebnet.it> wrote in message
news:Ot**************@TK2MSFTNGP09.phx.gbl...
Hi buddies,

I have a question.

I want to use the forms authentication in my web app.

My user login. The cookie is stored in the client machine and some
important information is stored in session variables.

What will happen if the user closes the browser and reopen to relog in
the application? I mean, the cookie is not expired yet so the login is
automatic, but, I have no session informations consequently my app
should fail (I assume).

Am I missing something or I have to create a workaround to bypass this
situation?

Thanks in advance

Stefano Mostarda
Rome Italy

Nov 17 '05 #5
"Mohammad A. Samara" <ad***@icslondon.com> wrote in message
news:Oc**************@TK2MSFTNGP12.phx.gbl...
Don't persist the cookie.

FormsAuthentication.SetAuthCookie(userId.ToString( ), false)
The other thing you can do is to put in the cookie enough information to
reconstruct your Session data.
--
John
--------------------

"Stefano Mostarda" <st**************@fastwebnet.it> wrote in message
news:Ot**************@TK2MSFTNGP09.phx.gbl...
Hi buddies,

I have a question.

I want to use the forms authentication in my web app.

My user login. The cookie is stored in the client machine and some
important information is stored in session variables.

What will happen if the user closes the browser and reopen to relog in
the application? I mean, the cookie is not expired yet so the login is
automatic, but, I have no session informations consequently my app
should fail (I assume).

Am I missing something or I have to create a workaround to bypass this
situation?

Thanks in advance

Stefano Mostarda
Rome Italy


Nov 17 '05 #6
"Mohammad A. Samara" <ad***@icslondon.com> wrote in message
news:Oc**************@TK2MSFTNGP12.phx.gbl...
Don't persist the cookie.

FormsAuthentication.SetAuthCookie(userId.ToString( ), false)
The other thing you can do is to put in the cookie enough information to
reconstruct your Session data.
--
John
--------------------

"Stefano Mostarda" <st**************@fastwebnet.it> wrote in message
news:Ot**************@TK2MSFTNGP09.phx.gbl...
Hi buddies,

I have a question.

I want to use the forms authentication in my web app.

My user login. The cookie is stored in the client machine and some
important information is stored in session variables.

What will happen if the user closes the browser and reopen to relog in
the application? I mean, the cookie is not expired yet so the login is
automatic, but, I have no session informations consequently my app
should fail (I assume).

Am I missing something or I have to create a workaround to bypass this
situation?

Thanks in advance

Stefano Mostarda
Rome Italy


Nov 17 '05 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

6
by: Billy Jacobs | last post by:
I have a website which has both secure and non-secure pages. I want to uses forms authentication. How do I accomplish this? Originally I had my web.config file in the root with Forms...
3
by: Nick | last post by:
I am working a new application...well actually a series of applications for my company. They want internal users to be able to go to a site and everything regarding security is transparent,...
11
by: ElmoWatson | last post by:
I tried on the Security newgroup, as well as other places, and haven't gotten an answer yet - - I'm pulling my hair out over this one. I'm trying to get Forms Authentication working.....I can get...
1
by: Rob | last post by:
I have an ASP.NET application that uses forms-based authentication. A user wishes to be able to run multiple sessions of this application simultaneously from the user's client machine. The...
2
by: Eric | last post by:
I am trying to build an app where the stuff in the root directory is open to all, but anything under the Restricted directory requires you to login and I want to use Forms to do it. I'm having...
7
by: Justin | last post by:
I am trying to password protect a subdirectory using forms authentication. I am using the "Location" tag to specify the directory to be protected. The login.aspx page is in the root directory of...
5
by: V. Jenks | last post by:
Using forms authentication, can I control which pages and/or directories a user would have access to or is that only available with Windows authentication? Thanks!
18
by: Rippo | last post by:
Hi I am using role base forms authentication in asp.net and have come across a problem that I would like advice on. On a successful login a session variable is set to identify a user. This is...
4
by: Bjorn Sagbakken | last post by:
In a web-application with login creds (user, pwd), these are checked against a user table on a SQL server. On a positive validation I have saved the userID, name, custno and role-settings in a...
5
by: Rory Becker | last post by:
Having now created a Custom MembershipProvider that seems to work correctly with my Logon and ChangePassword controls, I am, as they say, a happy bunny. The next stange is to move on to the...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: ryjfgjl | last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
0
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...
0
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.