Authentication ticket, cookieless, forms authentication?

Discussion in 'ASP .Net Security' started by Lauchlan M, Oct 1, 2003.

  1. Lauchlan M

    Lauchlan M Guest

    Hi.

    I want to use Forms Authentication, cookieless.

    The issue is setting the Authentication Ticket without using cookies (!)

    That is, the authentication ticket (cookie) will not be a cookie but passed
    around in the URL.

    I know there are some resources relating to setting th eAuthentication
    Ticket in a cookieless way, eg
    http://support.microsoft.com/default.aspx?scid=kb;[LN];Q311568 and
    http://msdn.microsoft.com/library/d...sdk/html/mwcondesigningsecureapplications.asp
    but none of these seem really satisfactory since they rely completely on the
    mobile internet toolkit.

    One can also bypass the MS user/identity/principal framework (eg
    http://www.codeproject.com/aspnet/cookieless.asp), and use Session
    variable(s) instead to 'roll your own' login/authentication framework using
    session variables and Global_AcquireRequestState in Glabal.asax (I would
    extend this to do roles as well).

    I want to know how to do the ASP.NET way of authentication (eg
    http://www.eggheadcafe.com/articles/20020906.asp), except in cookieless
    mode.

    But I don't feel I have found the right/best way to do cookieless forms
    authentication. It's looking like doing it the
    http://www.codeproject.com/aspnet/cookieless.asp Session variable way is the
    best bet for me at the moment.

    Any ideas / suggestions?

    Lauchlan M
     
    Lauchlan M, Oct 1, 2003
    #1
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. e
    Replies:
    1
    Views:
    3,608
    John Saunders
    Oct 24, 2003
  2. =?Utf-8?B?Y2h1Y2sgcnVkb2xwaA==?=

    Forms Authentication Ticket/Cookie values

    =?Utf-8?B?Y2h1Y2sgcnVkb2xwaA==?=, May 17, 2005, in forum: ASP .Net
    Replies:
    3
    Views:
    670
    Brock Allen
    May 19, 2005
  3. Replies:
    2
    Views:
    3,293
    Ravi Singh (UCSD)
    May 10, 2006
  4. Peter Rilling
    Replies:
    1
    Views:
    848
    bruce barker \(sqlwork.com\)
    Aug 3, 2006
  5. jfer
    Replies:
    3
    Views:
    576
    Dominick Baier [DevelopMentor]
    Sep 16, 2005
Loading...

Share This Page