determining if a user is authenticated

[Robert Rotstein]

How does one determine from Global.Application_BeginRequest() -- where
no Session information is available -- whether the invoking user has
been authenticated?

[Phillip Williams]

The application events occur in this sequence: BeginRequest,
AuthenticateRequest, AuthorizeRequest. Therefore you can determine if the
user was authenticated only starting at the AuthenticateRequest event
handling, e.g.

Sub Application_AuthenticateRequest(ByVal sender As Object, ByVal e As
EventArgs)
Dim app As HttpApplication = CType(sender, HttpApplication)
If app.Context.User.Identity.IsAuthenticated Then
'do something
End If
End Sub
--
HTH,
Phillip Williams
http://www.societopia.net
http://www.webswapp.com
"Robert Rotstein" wrote:

How does one determine from Global.Application_BeginRequest() -- where
no Session information is available -- whether the invoking user has
been authenticated?

[Juan T. Llibre]

You don't. There no access to Session from
that event, as you have already found out.

SessionState is not loaded until after the BeginRequest
has fired and before the EndRequest has fired.

Specifically, Session is accessible after AcquireRequestState has fired :

http://msdn.microsoft.com/library/de...statetopic.asp

You might want to use any event which fires after AcquireRequestState
has fired, like HttpApplication.PreRequestHandlerExecute :

http://msdn.microsoft.com/library/de...statetopic.asp

You could also use the PreSendRequestContent event :
http://msdn.microsoft.com/library/de...ntentTopic.asp

Juan T. Llibre, ASP.NET MVP
ASP.NET FAQ : http://asp.net.do/faq/
ASPNETFAQ.COM : http://www.aspnetfaq.com/
Foros de ASP.NET en Español : http://asp.net.do/foros/
======================================
"Robert Rotstein" <rr*******@verizon.net> wrote in message
news:fwcgf.1303$%%5.1302@trndny06...

How does one determine from Global.Application_BeginRequest() -- where no Session
information is available -- whether the invoking user has been authenticated?