Forms Authentication & Application Events

From: CaskConditioned (caskconditioned@hotmail.com)
Date: 02/18/03 

From: caskconditioned@hotmail.com (CaskConditioned)
Date: 17 Feb 2003 17:12:42 -0800

Hello:

Is there an event that fires in the global.asax when a user is
authenticated? And how do I determine if they already have the
authentication ticket?

Here's my problem: I have some session state that I need to initialize
upon login; using forms authentication and a dB. I also give them the
option of keeping the authentication cookie alive between sessions.
So, I would like to catch the authentication event, determine the
state of my session, and if need be re-query for the session data from
my dB.

Ex.

Normal Login - use username and password to retrieve CustID and other
data from dB; save to session

Existing Auth. Ticket - retrieve CustID from cookie, query dB for
other data and save to session

Thanks

Relevant Pages

  • Re: HELP Connection error on Release mode
    ... "Off" Always display detailed ASP.NET error information. ... This section sets the authentication policies of the application. ... Set trace enabled="true" to enable application trace logging. ... <!-- SESSION STATE SETTINGS ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Session Fixation Vulnerability in Web-based Applications
    ... session, without modifying the way servers generate session ID's is as ... Think of the http server generated sessions as "UI Sessions" and as ... no impact on authentication. ... "authentication key" for this domain (usually in the form of a new ...
    (NT-Bugtraq)
  • Re: [PHP] Re: a question on session ID and security
    ... constructed to produce the actual authentication token. ... looking at the cookies on the client gets no indication that you're ... testing for remote session hijacking weaknesses. ... blinded by a bright shiny new algorithm. ...
    (php.general)
  • Re: Forms authentication vs session variable
    ... There is a known security vulnerability called "Session Hijacking", ... and there are standard ways of protection. ... With forms authentication being the standard approach, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Forms authentication vs session variable
    ... There is a known security vulnerability called "Session Hijacking", ... and there are standard ways of protection. ... With forms authentication being the standard approach, ...
    (microsoft.public.dotnet.framework.aspnet)