Re: Forms Authentication and recycling web.config

From: Steven Cheng[MSFT] (v-schang_at_online.microsoft.com)
Date: 07/01/04 

Date: Thu, 01 Jul 2004 01:04:50 GMT

Hi Geo,

I think Bruce's suggestions are quite reasonable. Generally the asp.net
formsauthentication 's token is stored in cookie. Cookie is some files
stored in the client user's machine that's why it can remain even afte the
web application is restarted.
#Basics of Cookies in ASP.NET
http://msdn.microsoft.com/library/en-us/dv_vstechart/html/vbtchASPNETCookies
101.asp?frame=true

 And the session state are server side resources and by default it stored
in the server's memory and will be lost when the applicaiton restarted. The
session state has no relation with the formsauthentcaiont's token
maintainance.
#ASP.NET Session State
http://msdn.microsoft.com/library/en-us/dnaspnet/html/asp12282000.asp?frame=
true

Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

Get Preview at ASP.NET whidbey
http://msdn.microsoft.com/asp.net/whidbey/default.aspx

Relevant Pages

  • Re: is the HTTPCONTEXT.current.user content encrypted with session state??
    ... Session state is not sent to the client - only a cookie is sent to the client ... > rights for the current user alone with the roles. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: persistant cookie, what is it?
    ... Why don't you use Session State? ... cookie to identify the client. ... All you need to do to not persist a cookie is not to set ... client until the domain is navigated away from, or the browser is closed. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Programatically Login
    ... If it is view state or session state, then you can enter the information on ... If it is a cookie, then when you login you will have to capture the cookie ... can I do this using the HttpRequest and HttpResponse methods? ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Role Providers Cache
    ... If you are trying to avoid using session state (always a good idea in my ... the values in the cookie as the representative byte array of the roles. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... We will be writting our own role provider but would like to do ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Cookie and Webpage Question
    ... I am assuming that what you mean by sticky sessions is ... use ASP.Net Session state InProc mode. ... cookie to be used throughout the application. ... Read the cookie when the page first loads ...
    (microsoft.public.dotnet.framework.aspnet)