Re: When does the Roles/Username get set in HTTPContext?

there must be a Set-Cookie header coming from the server and subsequest cookies headers from the client...


-----
Dominick Baier (http://www.leastprivilege.com)

So I ran Fiddler and tracked the session traffic. I did not
specifically see anything like a cookie being written local, although
I did see the 302 redirect to my next page. Would a cookie show up as
a specific content-type that's being written?

Rob

"Dominick Baier" wrote:

no thats fine. If there are no events handled, the control will call
Membership.ValidateUser and afterwards
FormsAuthentication.RedirectFromLoginPage()

Try a tool like www.fiddlertool.com to sniff the http traffic - is
the cookie set? is a redirect done?



.

Relevant Pages

  • Re: asp.net login contol using url redirect
    ... Dominick Baier [DevelopMentor] wrote: ... > You have to manually issue the cookie and set the Domain property on the ... >> If however I include the site in a frame on another site, e.g., ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Question about cookie protection and FormsAuthentication.Encry
    ... The FormsAuthenticationModule has to read the cookie on every request - the protection setting tells the module if the cookie is ought to be encrypted and signed. ... Dominick Baier ... a ticket and use it to logon to your application - thats the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: When does the Roles/Username get set in HTTPContext?
    ... Dominick Baier ... specifically see anything like a cookie being written local, ... although I did see the 302 redirect to my next page. ... the cookie set? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Cookie expires after 30 mins when I set longer expiring time..
    ... Because I want to allow users to custom the expiring time of their cookie. ... "Dominick Baier" wrote: ... following codes to set the expire time of cookie to 3 days. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: FormsAuthentication.SignOut(); doesnt work...
    ... use a tool like www.fiddlertool.com to check if the cookie is really cleared... ... Dominick Baier - DevelopMentor ... > After 'logging off', ...
    (microsoft.public.dotnet.framework.aspnet.security)