Re: Form Authentication with cookieless browser

From: Machi (pangts_at_yahoo.com)
Date: 10/21/03 

Date: Mon, 20 Oct 2003 23:55:27 -0700

Thank you very much.

>-----Original Message-----
>Hi,
>
>working without cookies with Forms Authentication needs
bit custom work to
>be done, namely you need to manually persist the forms
authentication ticket
>in the querystring.
>
>The query string variable name needs to match the cookie
name specified at
>web.config for the forms authentication and the actual
data is the encrypted
>FormsAuthenticationTicket instance (result from
FormsAuthentication.Encrypt
>method)
>
>One view to the subject and alternative solution is
provided here as well:
>http://www.codeproject.com/aspnet/cookieless.asp
>http://www.dotnet247.com/247reference/msgs/18/92912.aspx
>
>--
>Teemu Keiski
>MCP, Microsoft MVP (ASP.NET), AspInsiders member
>ASP.NET Forum Moderator, AspAlliance Columnist
>
>
>
>
>
>
>"Machi" <pangtatsean1977@yahoo.com> wrote in message
>news:049501c396b0$c4ddda30$a301280a@phx.gbl...
>> This is a definition for Form Authentication from MSDN :
>> "The Forms authentication provider is an authentication
>> scheme that makes it possible for the application to
>> collect credentials using an HTML form directly from the
>> client. The client submits credentials directly to your
>> application code for authentication. If your application
>> authenticates the client, it issues a cookie to the
client
>> that the client presents on subsequent requests. If a
>> request for a protected resource does not contain the
>> cookie, the application redirects the client to the
logon
>> page."
>> My Question : If i want to use Form authentication but
>> client browsers does not support cookies (Since we do
not
>> know whether particular users' browsers will support
>> cookie or not), when user tries to sign in to my page,
how
>> actually ASP.NET works internally in order to support
>> cookieless browser??? Thanks
>
>
>.
>

Relevant Pages

  • Re: Forms Authentication and Authentication Cookie
    ... control over how that client accesses this application. ... requests originating from outside the application. ... authentication ticket in the authentication cookie (not sure if this is the ... the same name (the name of the authentication cookie) .. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Forms authentication cookie handling question (C#)
    ... I also replaced all of my ticket authentication code with the ... // Username and or password not found in our database... ... LoginControl's default code logic to generate authentication cookie. ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Forms Authentication
    ... The DNS entry for my domain was not set corrretly, ... This should have overcome the cookie ... authentication ticketis not correctly set to the domain your ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Forms authentication cookie handling question (C#)
    ... programmatically generate forms authentication ticket and set it in ASP.NET ... You use the Login control's "Authentication" event to do the user ... LoginControl's default code logic to generate authentication cookie. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Form Authentication with cookieless browser
    ... working without cookies with Forms Authentication needs bit custom work to ... namely you need to manually persist the forms authentication ticket ... The query string variable name needs to match the cookie name specified at ... The client submits credentials directly to your ...
    (microsoft.public.dotnet.framework.aspnet.security)