FormsAuthentication and Session

[Joe]

I'm using FormsAuthentication and need to track a user id (int) along with
the user name. I was trying to store the user id under the Session but if
the user closes the browser and opens another browser and goes back to the
page the user is still logged in.

I have 2 choices:
1 - Log the user out whenever the browser is closed
2 - Store the user id in a cookie.

I would prefer option 1 but I don't know how to Sign out the user when the
browser is closed and the session is no longer valid.

[Lucas Tam]

"Joe" <J_no_spam@_no_spam_Fishinbrain.com> wrote in
news:#b*************@TK2MSFTNGP09.phx.gbl:

I'm using FormsAuthentication and need to track a user id (int) along
with the user name. I was trying to store the user id under the
Session but if the user closes the browser and opens another browser
and goes back to the page the user is still logged in.

I have 2 choices:
1 - Log the user out whenever the browser is closed
2 - Store the user id in a cookie.

I would prefer option 1 but I don't know how to Sign out the user when
the browser is closed and the session is no longer valid.

You can extend the IPrincipal and IIdentity
(FormsIdentitiy/GenericIdentity) interfaces to add custom data to your
user clasess.

This page sort of explains the process and does a bit more too:

http://www.codeproject.com/aspnet/ro...entication.asp
--
Lucas Tam (RE********@rogers.com)
Please delete "REMOVE" from the e-mail address when replying.
http://members.ebay.com/aboutme/coolspot18/

[Patrick.O.Ige]

Why don't you use FormsAuthSignOut()
And then use Session.Abandon..
Hope that helps..
or PS do it in the Global.asax
Patrick

"Joe" <J_no_spam@_no_spam_Fishinbrain.com> wrote in message
news:%2***************@TK2MSFTNGP09.phx.gbl...

I'm using FormsAuthentication and need to track a user id (int) along with
the user name. I was trying to store the user id under the Session but if
the user closes the browser and opens another browser and goes back to the
page the user is still logged in.

I have 2 choices:
1 - Log the user out whenever the browser is closed
2 - Store the user id in a cookie.

I would prefer option 1 but I don't know how to Sign out the user when the
browser is closed and the session is no longer valid.