Re: FormsAuthentication cookie refreshing
- From: "Cowboy \(Gregory A. Beamer\)" <NoSpamMgbworld@xxxxxxxxxxxxxxxxxx>
- Date: Fri, 6 Oct 2006 12:07:13 -0500
Without altering the forms auth model, it only extends time when a page is
hit, so XMLHTTP is out of the question, unless you are going to write an
elaborate scheme to update the actual client side cookie (which would
probably fail due to security concerns on the client). You could extend
timeout, of course, but there is an issue there.
Question is: Why do you have to contact this other site? Is it possible to
wrap the other sites data in a web service and bind on your original site?
If impossible, you will have to refresh an actual page. iFrame with a BS
page is one possibilty, but a complete reachitecture of the system is
probably in order (system as a whole, both sites).
--
Gregory A. Beamer
MVP; MCP: +I, SE, SD, DBA
http://gregorybeamer.spaces.live.com
*************************************************
Think outside of the box!
*************************************************
"Dan" <Dan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:43F164E0-FF6E-4B6A-B60F-BC899E1D5A78@xxxxxxxxxxxxxxxx
Hi,
I am trying to refresh the cookie to make sure the timeout is reset by
simply calling a blank page on my site. I am doing this because I have an
external site hosted in my web that isn't sharing the auth mechanism. I
can
test this easily by simply having a hidden iframe and use a javascript
call
to refresh my sites blank page every time the external site loads a page
and
this does work fine, the cookie is refreshed as expected if half the
expiration time has expired.
My question is about using another way of doing the refresh. I had tried
using an XMLHttpRequest initially as it was a bit neater, but for some
reason
this did not cause the cookie to be reset. I had thought that the forms
auth
module would process the request regardless of how it was generated and
thus
reset the cookie expiration if that was needed, but I guess I don't really
understand how XMLHTTPRequest really works at all! Can anyone help
explain? I
mean does it not send the cookie in the first place or is something else
going on under the covers?
Thanks
Dan
.
- Follow-Ups:
- Prev by Date: Re: Build error
- Next by Date: Preprocessor directives in codebehind file
- Previous by thread: Re: Build error
- Next by thread: Re: FormsAuthentication cookie refreshing
- Index(es):
Relevant Pages
|