Cookie Encryption and custom auth

From: Patrick Long (patrick.long@nospamplease_btinternet.com)
Date: 08/20/02 

From: "Patrick Long" <patrick.long@nospamplease_btinternet.com>
Date: Tue, 20 Aug 2002 11:34:32 +0100

We are thinking of creating our own Authentocation HttpModule for inhouse
SSI. I was looking at the idea of one cookie shared across the
ourcompany.com domain that contained a list of sites the use was
authenticated for an a cookie per site
containing roles.

When the user tried to authenticate against site A the module would look for
the shared cookie and see if A was in the list of authenticated sites if not
the code would try and authenticate them and add the site to the list. The
roles cookie would then be created with a list of the users roles for that
site.

The problem i have i working out how to encrypt the data in both cookies.
Can someone please give me some pointers?

Thanks

Pat Long

Relevant Pages

  • Re: Use owa cookie for authentication
    ... The plugin is a c# asp .net application that needs to authenticate the user ... Don't I have to decode the cadata cookie to get the ... >> There is no problem when I use NTLM in owa, but when I switch to Forms ...
    (microsoft.public.exchange.development)
  • Re: Linux/Windows Authentication?
    ... implementations I've seen used username/passwd to generate a cookie in ... the client's browser. ... > we would be looking for a transparent way to authenticate = them and to ...
    (Pen-Test)
  • Re: Single Sign on with Oracle
    ... users and then add a cookie with whatever information you need from the LDAP ... Authenticate against the Active Directoryby Using Forms ... Sam Santiago ...
    (microsoft.public.dotnet.distributed_apps)
  • Re: FormsAuthentication - Weird Behaviour
    ... a cookie is stored in there ... > problem I am having with the source code is that I cannot authenticate any> user. ... The login> component is still there. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Role-based authentication and Forms and System.UnauthorizedAccessException
    ... > users roles if they have cookies disabled? ... >> have access to the Session as the SessionModule runs after this ... >> The common approach is to store the roles in the cookie. ...
    (microsoft.public.dotnet.framework.aspnet.security)