RE: Forms Authentication Across Applications

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Thanks peter for your reponse.

if the cookie is not issued in the parent application (the one with the
<form> tag which calls "auth.asp") let's say they use another way of keeping
the security context , then I am stuck? :)

BTW, I though that :

1) There is something called cookieless form authentication which does not
require cookie

2) Cookie and ticket are two differnet things but related. From what I have
interpreted from "The Forms auth ticket cookie is issued by ASP.NET ..." they
are the same thing? Can my html application which calls that asp page issues
a ticket and I get that ticket in my asp.net page and reuse it as part of the
forms authentication scenario?


Thanks a lot for your time

"Peter Bromberg [C# MVP]" wrote:

The Forms auth ticket cookie is issued by ASP.NET on the server in response
to a login form post with the username and password.
Peter

--
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
Short urls & more: http://ittyurl.net




"Fariba" wrote:

The application which is calling my application is an HTML application with
the form tag I mentioned before. Will it be able to issue a ticket or cooki?

Thanks

"Peter Bromberg [C# MVP]" wrote:

Forms authentication works with, and requires cookies. So unless you want to
manually (in your code) create and assign a vaild Forms Auth ticket in
response to the querystring "deal", that would be the only way that I can
think of.
Peter
--
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
Short urls & more: http://ittyurl.net




"Fariba" wrote:

It know that we can use the following method
http://msdn2.microsoft.com/en-us/library/eb0zx8fc.aspx

to form authenticate across multiple applications.

I have created an asp.net application that supports form authentication. My
application is going to be called by another legacy application (HTML) which
does the initial authentication.Something like this:

<form name="form1" action="auth.asp" method="post" >
.....
</form>

How can I implement "Forms Authentication Across Applications" in this
case? I assume sending authentication information via query string is my
only option, right?

Thanks a lot

Fariba
ASP.NET ISharp - Cairo


.

Relevant Pages

  • Perplexing and critical error - please help!
    ... The site uses Forms authentication w/ anonymous ... pass information about the current conference. ... FormsAuthenticationTicket ticket = new FormsAuthenticationTicket( ... // "true" for a durable user cookie ...
    (microsoft.public.dotnet.framework.aspnet.webcontrols)
  • Perplexing and critical error - please help!
    ... The site uses Forms authentication w/ anonymous ... pass information about the current conference. ... FormsAuthenticationTicket ticket = new FormsAuthenticationTicket( ... // "true" for a durable user cookie ...
    (microsoft.public.dotnet.framework.aspnet)
  • FormsAuthentication Encrypt/Decrypt Problem/Issue
    ... ticket, ... // cookie as data. ... // code snippet from global.asax.cs ... Why do I not pick up all user groups? ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Http Module -Multiple Projects
    ... FormsAuthenticationTicket ticket = id.Ticket; ... // the cookie values and encryption keys for the given application) ... "thomson" wrote: ... since i do have multiple Web Projects? ...
    (microsoft.public.dotnet.framework.aspnet)
  • Cookie not persisted w/o call to GetRedirectUrl()
    ... one as I am using multiple roles and I want to redirect the user after ... FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(1, ... HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName, ... Set the expiration for the cookie that contains the ticket ...
    (microsoft.public.dotnet.framework.aspnet.security)