Re: What is the best way to login my website from another website?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

IMO *they* should redirect to your site based upon the web service result
(if credentials are not valid, they'll need to display the page
again).They'll likely then pass a guid associated with the user you returned
to them so that you know which user it is. Make sure this is a temporary
guid so that it is not usable for ages if stolen (changed at least each time
a new login request is issued).

Or else Chad solution that would be what you would do for your inhouse
servers (though I would likely prefer to be "explicit" about such a link
with external world).

Oh BTW, you may want to explain the overall goal as I'm not sure to have
caught the details (basically if all they do is hosting the login page you
could perhaps have a customized login page for them on your own web site ?).
They are not using those credentials at all at their site ?

--
Patrice

"rockdale" <rockdale.green@xxxxxxxxx> a écrit dans le message de news:
1183652148.109327.75780@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
So what you mean is I write a web service to accept the user id and
pwd that they passed and do authorization, But how can I redirect them
to my member's home page after I validate user id and pwd?

Thanks for your help

On Jul 5, 12:08 pm, "Patrice" <http://www.chez.com/scribe/> wrote:
AFAIK ASP.NET checks posted data to make sure that they are coming from a
page that was served by the same server.

I would just post to the same page and would transmit data behind the
scene
using a web service...

"rockdale" <rockdale.gr...@xxxxxxxxx> a écrit dans le message de news:
1183650687.509733.262...@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx



Hi, all:

I have a website with its own login page. Now one of my clients want
their employees log into my website from their website. They want to
have their login page (look and feel are different and hosted on
another web server) and then send the user id and pwd to my login
page. What is the best to do this?

Pass the user id and pwd on the url is not a solution since everybody
will see the user's credential.

We are trying to build their login page like following:

<form action="https://mywebsite/Login.aspx"; id="form1" name="form1"
method="post" action="" style="padding:0; margin:0;">
<input type="hidden" name="__EVENTTARGET" id="__EVENTTARGET"
value="" />
<input type="hidden" name="__EVENTARGUMENT" id="__EVENTARGUMENT"
value="" />
<input name="txtUserID" type="text" size="18" />
<input name="txtPWD" type="password" size="18" />
<input name="Submit" type="submit" style="font-size: 10px;"
value="Login" />
</form>

But we got the error
Invalid postback or callback argument. Event validation is enabled
using <pages enableEventValidation="true"/> in configuration or <%@
Page EnableEventValidation="true" %> in a page.

I do not think Disable Event validation is a good idea.

Is there any other better approach?

Thanks a lot.- Hide quoted text -

- Show quoted text -



.

Relevant Pages

  • Re: How to redirect after setting session?
    ... > die(); ... So I moved the code to the top of the page, and the redirect works now. ... When the user clicks on the link to go back to the login page, ... credentials, then clicks submit, the redirect fails with "Cannot find ...
    (comp.lang.php)
  • RE: User Login Webservice
    ... you'd have user credentials included ... with any web service request. ... >Subject: User Login Webservice ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: HTTPWebRequest and Redirect
    ... If it's a .ascx, ... Both your .ascx and your web service can call some method to do the ... > HTTPWebResponse) FORM post a user's credentials to a HTTPS login page ... > have been created with successful login and do a redirect to the page ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Page redirection in webservices ?
    ... resides in the same web project, but a login web service would simply accept ... There is no Redirect in a web service. ... > How can i redirect the client to go to the webservice's login page. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: Encrypted or Not Encrypted
    ... Now, from what I understand, the login credentials would still be ... the effect of having it redirect to a secure site in the first place. ...
    (Security-Basics)