Re: Form Authentication with cookieless browser

From: Teemu Keiski (joteke_at_aspalliance.com)
Date: 10/20/03 

Date: Mon, 20 Oct 2003 21:14:09 +0300

Hi,

working without cookies with Forms Authentication needs bit custom work to
be done, namely you need to manually persist the forms authentication ticket
in the querystring.

The query string variable name needs to match the cookie name specified at
web.config for the forms authentication and the actual data is the encrypted
FormsAuthenticationTicket instance (result from FormsAuthentication.Encrypt
method)

One view to the subject and alternative solution is provided here as well:
http://www.codeproject.com/aspnet/cookieless.asp
http://www.dotnet247.com/247reference/msgs/18/92912.aspx 

-- 
Teemu Keiski
MCP, Microsoft MVP (ASP.NET), AspInsiders member
ASP.NET Forum Moderator, AspAlliance Columnist
"Machi" <pangtatsean1977@yahoo.com> wrote in message
news:049501c396b0$c4ddda30$a301280a@phx.gbl...
> This is a definition for Form Authentication from MSDN :
> "The Forms authentication provider is an authentication
> scheme that makes it possible for the application to
> collect credentials using an HTML form directly from the
> client. The client submits credentials directly to your
> application code for authentication. If your application
> authenticates the client, it issues a cookie to the client
> that the client presents on subsequent requests. If a
> request for a protected resource does not contain the
> cookie, the application redirects the client to the logon
> page."
> My Question : If i want to use Form authentication but
> client browsers does not support cookies (Since we do not
> know whether particular users' browsers will support
> cookie or not), when user tries to sign in to my page, how
> actually ASP.NET works internally in order to support
> cookieless browser??? Thanks

Relevant Pages

  • Re: Forms Authentication and Authentication Cookie
    ... control over how that client accesses this application. ... requests originating from outside the application. ... authentication ticket in the authentication cookie (not sure if this is the ... the same name (the name of the authentication cookie) .. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Forms authentication cookie handling question (C#)
    ... I also replaced all of my ticket authentication code with the ... // Username and or password not found in our database... ... LoginControl's default code logic to generate authentication cookie. ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Forms Authentication
    ... The DNS entry for my domain was not set corrretly, ... This should have overcome the cookie ... authentication ticketis not correctly set to the domain your ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Forms authentication cookie handling question (C#)
    ... programmatically generate forms authentication ticket and set it in ASP.NET ... You use the Login control's "Authentication" event to do the user ... LoginControl's default code logic to generate authentication cookie. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Form Authentication with cookieless browser
    ... >working without cookies with Forms Authentication needs ... >The query string variable name needs to match the cookie ... The client submits credentials directly to your ...
    (microsoft.public.dotnet.framework.aspnet.security)