Re: Custom IPrincipal and declarative security checking
From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 03/16/05
- Next message: Paul Glavich [MVP ASP.NET]: "Re: I need to figue out the count of the sessions."
- Previous message: Dominick Baier [DevelopMentor]: "Re: Retrieve User Name in C#.net"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: microsoft.public.dotnet.security,microsoft.public.dotnet.framework.aspnet.security Date: Wed, 16 Mar 2005 00:08:55 -0800
download http://www.pluralsight.com/toolcontent/show_pipeline.zip
put the ashx file in a web app and run it through your browser - you'll see the DefaultAuthentication event (this one is hardwired and you will not find a registration in the HttpModules section in machine.config).
fire up Reflector and look for System.Web.Security.DefaultAuthenticationModule - in the OnEnter method you'll see a call to "SetPrincipalOnThread" - follow this link - and there you are.
was that the "documentation" you are looking for ? :)
---
Dominick Baier - DevelopMentor
http://www.leastprivilege.com
nntp://news.microsoft.com/microsoft.public.dotnet.security/ Thanks Nicole and Dominick,
@Nicole, you guessed right, my implementation of IsAuthenticated was buggy,
fixed that and everything works as expected...
@Dominick, do you happen to have a link to some documentation on that
undocumented behavior?
rgds,
Baileys
[microsoft.public.dotnet.security]
Relevant Pages
... @Nicole, you guessed right, my implementation of IsAuthenticated was buggy, ...
(microsoft.public.dotnet.security)
... Dominick Baier - DevelopMentor ... Thanks Nicole and Dominick, ... @Nicole, you guessed right, my implementation of IsAuthenticated was buggy, ...
(microsoft.public.dotnet.security)
... For documentation of the copying of the context user to the thread ... > Thanks Nicole and Dominick, ...
(microsoft.public.dotnet.security)
... There diesn't seem to be an update on the cookies from 1.0 ... > Dominick Baier - DevelopMentor ... >> Yes, using Forms auth. ...
(microsoft.public.dotnet.framework.aspnet.security)
