Re: FormsAuthentication.RedirectFromLoginPage

From: Andy Sutorius (andy_at_sutorius.com)
Date: 02/16/05 

Date: Wed, 16 Feb 2005 22:26:39 GMT

Bill,

Thanks for the extra eyes. In fact there is a web.config in the subfolder
with the same deny/allow so I took it out. Getting the same action though.
I've got something silly turned on/off, I just know it.

I like this article and related code:
http://www.theserverside.net/articles/article.tss?l=FormAuthentication

Andy

"Bill Borg" <BillBorg@discussions.microsoft.com> wrote in message
news:D0D387BD-3161-4A6D-9EAF-F17332BB0A34@microsoft.com...
> Looks pretty good at first blush. Any chance there's a web.config in the
> subfolder too (that would override the root)?
>
> Also, per your comment above, I'll be anxious to read Steve's response.
I've
> been working through all this same stuff lately. To me,
redirectfromloginpage
> is one of those times where asp.net does *too* much to make it easy, so
you
> don't really understand what's happening underneath. Afaik, it combines
> creating the cookie, creating the authentication ticket stored in the
cookie,
> persisting them or not, and redirecting to the requested page. You can do
all
> these yourself if you understand what's happening, and you're forced to do
> that in cases I run into all the time, such as wanting to name the cookie
> myself, keeping multiple cookies, playing with timeout values per user,
etc.
> Best discussion I've seen of all this is in Esposito's Programming ASP.NET
> (best discussion of most *anything* is in that book). There's also a ton
of
> great stuff in this forum.
>
> Bill
>

Relevant Pages

  • Re: Forms Authentication w/SubFolders
    ... > made a few days later that reports a similar issue: Sucessful authentication ... > the fact that this cookie exists, and returns to the login.aspx page. ... >>When the user access a resource in a subfolder, ... >>when the login form attempts to redirect the browser to ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: SignOut a User
    ... Then, instead of calling RedirectFromLoginPage, call GetRedirectUrl. ... authentication cookie value. ... >Subject: Re: SignOut a User ... >as far as I know it doesn't matter how many connections there are, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: FormsAuthentication Cookie
    ... Also assume that the username of the ... Sub Page_Load ... Internet Files folder & click the cookie, I find that the cookie has ... first parameter in the methods RedirectFromLoginPage & GetAuthCookie? ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: FormsAuthentication.RedirectFromLoginPage
    ... creating the cookie, creating the authentication ticket stored in the cookie, ... Bill ... "Andy Sutorius" wrote: ... doesn't the redirectfromloginpage call create the cookie for you? ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: FormsAuthentication.RedirectFromLoginPage
    ... creating the cookie, creating the authentication ticket stored in the cookie, ... "Andy Sutorius" wrote: ... > control access into a subdirectory from the web.config in the root folder. ... doesn't the redirectfromloginpage call create the cookie for you? ...
    (microsoft.public.dotnet.framework.aspnet)