Re: trouble w/ Forms Auth and domain cookies

From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 07/28/05

  • Next message: Perecli Manole: "how to prevent auth ticket expiration" 
    Date: Thu, 28 Jul 2005 00:22:13 -0700

    Hello jeffpriz@yahoo.com,

    haven't tried that - but can you cycle through the whole cookie collection
    and just remove everything

    foreach (HttpCookie in Response.Cookies)
      ....

    ---------------------------------------
    Dominick Baier - DevelopMentor
    http://www.leastprivilege.com

    > Well I've tried a few things. I have tried the Remove, but that's not
    > met with any success (when I do my
    > context.Reesponse.Cookies.Remove("cookieName"), I assume I'm removing
    > one cookie, but I don't get access to BOTH cookies, I'm accessing by
    > name, I have 2 duplicately named cookies...)
    >
    > Also I've tried expiring the cooking by writing out the same domain
    > cookie with an old expiration time.. but I haven't actually been able
    > to get it expired. It continues to authenticate against it.
    >
    > thanks
    >
    > jeffpriz
    >

  • Next message: Perecli Manole: "how to prevent auth ticket expiration"

    Relevant Pages

    • Re: FormsAuthentication.SignOut(); doesnt work...
      ... use a tool like www.fiddlertool.com to check if the cookie is really cleared... ... Dominick Baier - DevelopMentor ... > After 'logging off', ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: "secure" flag for HttpCookies
      ... Dominick Baier - DevelopMentor ... the client will not send the cookie to the server on all requests. ... But this doesn't matter cause an attacker can just sniff the cookie on ...
      (microsoft.public.dotnet.security)
    • Re: asp.net login contol using url redirect
      ... Dominick Baier [DevelopMentor] wrote: ... > You have to manually issue the cookie and set the Domain property on the ... >> If however I include the site in a frame on another site, e.g., ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: XML Webservice authentication
      ... what do you mean with "but will need to be authenticated via a cookie" ?? ... Dominick Baier - DevelopMentor ... "web service way" would be to use a SOAP header. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: XML Webservice authentication
      ... you have to make sure that the data island xml call sends the formsauth cookie - i am not sure if this happens by default/how it works. ... Dominick Baier - DevelopMentor ... new to Web Services so may be there is a better techonology I can ...
      (microsoft.public.dotnet.framework.aspnet.security)