Re: Forms based security without cookies?

From: Eric (fish11@earthling.net)
Date: 08/22/02 

From: "Eric" <fish11@earthling.net>
Date: Thu, 22 Aug 2002 13:26:30 +0200

Hi, I think I can help you.

Formbased security without cookies is tricky.
Read first this:
http://www.aspnetpro.com/features/2002/08/asp200208bb_f/asp200208bb_f.asp
There are some hints, but not all.

For ex. this function "FormsAuthentication.RedirectFromLoginPage(sUser,
False)" , you can't use.
It will always try to store a cookie.
The trick is, to send for every page your authentication ticket not as
cookie but as parameter for the URL. (read the article).
Also important is, to add this special parameter to the url for every page
and with the same name like the cookie name. I think the FormsAuthentication
Module will look for this parameter in the url automatically.

I don't understand, why Microsoft haven't add a chapter to the documentation
about this point.

I hope this helps
Eric