Form Authentication with cookieless browser

[Machi]

This is a definition for Form Authentication from MSDN :
"The Forms authentication provider is an authentication
scheme that makes it possible for the application to
collect credentials using an HTML form directly from the
client. The client submits credentials directly to your
application code for authentication. If your application
authenticates the client, it issues a cookie to the client
that the client presents on subsequent requests. If a
request for a protected resource does not contain the
cookie, the application redirects the client to the logon
page."
My Question : If i want to use Form authentication but
client browsers does not support cookies (Since we do not
know whether particular users' browsers will support
cookie or not), when user tries to sign in to my page, how
actually ASP.NET works internally in order to support
cookieless browser??? Thanks

 

[Teemu Keiski]

Hi,

working without cookies with Forms Authentication needs bit custom work to
be done, namely you need to manually persist the forms authentication ticket
in the querystring.

The query string variable name needs to match the cookie name specified at
web.config for the forms authentication and the actual data is the encrypted
FormsAuthenticationTicket instance (result from FormsAuthentication.Encrypt
method)

One view to the subject and alternative solution is provided here as well:
http://www.codeproject.com/aspnet/cookieless.asp
http://www.dotnet247.com/247reference/msgs/18/92912.aspx

 

[Machi]

Thank you very much.

-----Original Message-----
Hi,

working without cookies with Forms Authentication needs bit custom work to
be done, namely you need to manually persist the forms authentication ticket
in the querystring.

The query string variable name needs to match the cookie name specified at
web.config for the forms authentication and the actual data is the encrypted
FormsAuthenticationTicket instance (result from FormsAuthentication.Encrypt
method)

One view to the subject and alternative solution is provided here as well:
http://www.codeproject.com/aspnet/cookieless.asp
http://www.dotnet247.com/247reference/msgs/18/92912.aspx

--
Teemu Keiski
MCP, Microsoft MVP (ASP.NET), AspInsiders member
ASP.NET Forum Moderator, AspAlliance Columnist









.