RE: Forms based security

From: [MSFT] (lukezhan_at_online.microsoft.com)
Date: 06/21/04 

Date: Mon, 21 Jun 2004 03:30:42 GMT

Hi Charlie,

To get the form authentication cookie, you may get the cookie name from:

FormsAuthentication.FormsCookieName

However, the cookie is encrypted, and we cannot get its actual value.

Regarding the issue, since the content are accessible to both of
Authenticated user and others, you can just leave the content public. Is
this right?

If you have private and public content on a same web form, you may consider
following work around:

When perform form authentication, you can add a cookie by yourself,
indcating the user has been authenticated. And then, arrange pages based
on this cookie value.

Hope this help,

Luke
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

Relevant Pages

  • RE: Forms Authentication Across Applications
    ... if the cookie is not issued in the parent application (the one with the ... Cookie and ticket are two differnet things but related. ... "Fariba" wrote: ... I have created an asp.net application that supports form authentication. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Forms based security
    ... > Hi Charlie, ... > To get the form authentication cookie, you may get the cookie name from: ... > Authenticated user and others, you can just leave the content public. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • ASP.Net and Forms Authentication
    ... If I use Form Authentication, encrypting ticket and stroring it in a cookie, ...
    (microsoft.public.dotnet.security)
  • Re: SSL
    ... Let's assume I'm using SSL. ... > authenticated user sitting at their client browser to modify their clear ... cookie would be alarming as they are undoubtedly aware of their own social ... browsers as Mozilla and having such cookie alert setting turned on. ...
    (microsoft.public.dotnet.framework.aspnet)
  • get returning user for forms auth?
    ... application-specific session variables for that user. ... user again when he reenters the site; I pondered checking auth cookie ... How do I find out that authenticated user is re- ...
    (microsoft.public.dotnet.framework.aspnet.security)