When to use FormsAuthenticationTicket()

[Andrew]

Hi, guys,

After I use FormsAuthentication.SetAuthCookie() to anthenticate a user, I
don't think I need to create a new FormsAuthenticationTicket(), right?

Then, at what situation, we should use ticket? Any reference papers?

Thanks.

[Brock Allen]

The only time you'd need to work with the FormsAuthTicket is if you wanted
to manually issue the Form Auth Cookie. When you call FormsAuth.SetAuthCookie
it creates the ticket, encrypts it then issues that as the cookie. The main
reason you'd want to do this yourself is that the FormAuthTicket allows you
to put in some user-defined data inside of it. This is nice since FormAuth
does encryption and MAC protection on the ticket (so you don't have to).

-Brock
DevelopMentor
http://staff.develop.com/ballen

Hi, guys,

After I use FormsAuthentication.SetAuthCookie() to anthenticate a
user, I don't think I need to create a new
FormsAuthenticationTicket(), right?

Then, at what situation, we should use ticket? Any reference papers?

Thanks.