Re: Cookieless forms authentication in Asp.Net 1.0?

No this is possible since 2.0

--
Daniel Fisher(lennybacon)
http://www.lennybacon.com


"Marcus" <holysmokes99@xxxxxxxxxxx> wrote in message
news:1133285175.494325.317910@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Is cookieless forms authentication supported in asp.net 1.0? I have a
> website that must be cookieless, and thought that it would be a no
> brainer to add forms authentication. Logging in to the site is OK, but
> when the session expires and I call FormsAuthentication.signout() in
> the Session_End sub, the new session that begins on the next page
> refresh has the same ID as the old session ID, and I am not redirected
> to the login page (can still browse all pages).
>
> Thanks for any help.
>
> Marcus
>


.

Relevant Pages

  • RE: Session not set.
    ... If so, it will never work properly, as the session cookie is never set. ... Checking Sessionfor login is an ASP model, ... If you TRULY want cookieless (setting session vars is not ... the Framework to handle your authentication needs, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: How to do forms authentication with cookieless=UseUri?
    ... you are confusing session and authentication. ... forms authentication create a login ticket and stores it in a cookie or the ... this is because cookieless changes the url to have a login ticket. ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Security and cookieless sessions
    ... Cookieless sessions are designed to support certain protocols which don’t ... for personal reasons turn cookie persistence off in their browsers. ... surreptiously while the session was active, they could use it to spoof the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Session ID in Query Parameter?
    ... So when posting from such normal html page the session state will ... the ASP.NET buildin cookieless session support does ... It uses the Session object and I really don't want to ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Major security issue?
    ... We have used cookieless sessions and what you say is true, ... client/server (ie. if connection broken, then the SSL session is invalid) so ... > would add some overhead to IIS because every HTTP request ...
    (microsoft.public.dotnet.framework.aspnet)