Re: Timeout differences

hi,

you get redirected to the login page upon the next request.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Hi,

Yes it does,

but in case authentication cookie expires before the session cookie,
how does ASP handle this?

thanks

"Dominick Baier [DevelopMentor]" wrote:

2 different mechanism (session & authentication)
2 cookies
2 timeouts
makes sense?

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com
Hello,

What is the difference between the followings in web.config;

<SettionState> session timeout? and <authentication mode="Forms">
cookie timeout?

Thanks



.

Relevant Pages

  • Re: FormsAuthentication.SignOut(); doesnt work...
    ... use a tool like www.fiddlertool.com to check if the cookie is really cleared... ... Dominick Baier - DevelopMentor ... > After 'logging off', ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: "secure" flag for HttpCookies
    ... Dominick Baier - DevelopMentor ... the client will not send the cookie to the server on all requests. ... But this doesn't matter cause an attacker can just sniff the cookie on ...
    (microsoft.public.dotnet.security)
  • Re: asp.net login contol using url redirect
    ... Dominick Baier [DevelopMentor] wrote: ... > You have to manually issue the cookie and set the Domain property on the ... >> If however I include the site in a frame on another site, e.g., ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: XML Webservice authentication
    ... what do you mean with "but will need to be authenticated via a cookie" ?? ... Dominick Baier - DevelopMentor ... "web service way" would be to use a SOAP header. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: XML Webservice authentication
    ... you have to make sure that the data island xml call sends the formsauth cookie - i am not sure if this happens by default/how it works. ... Dominick Baier - DevelopMentor ... new to Web Services so may be there is a better techonology I can ...
    (microsoft.public.dotnet.framework.aspnet.security)