Ask a Question related to ASP.NET Security, Design and Development.
-
mikemad #1
Forms Authentication and requireSSL, what's the recommended best practice
I have an ASP.NET 1.1 Web app and am now implementing SSL. It used
forms authentication. Everything works fine but I get unexpected(by me)
behavior when I set the requireSSL in the config file.
My scenario is, I want to login securely in a secure directory and then
redirect to the home page of the site. Pretty standard. If they are
logged in, then display a header bar with a few menu items such as
"Profile", etc. I am checking the Request.IsAuthenticated and if it is
true, I show the header bar. Well, IsAuthenticated is false when I'm
not under the SSL directory so it doesn't display my header bar. What's
the recommended way of doing this kind of common operation. I could
just set a Session variable when I login and display the menu if that
session variable is set. Is there a better way??
Thanks,
Mike Maddox
Creative Journey Consulting
mikemad Guest
-
Accessing htm files without authentication (forms authentication)
I have application with forms authentication. All works fine. When user opens .aspx file gets login form, login and then get the .aspx page. But... -
ASP.Net Forms authentication with basic authentication popup
Relatively new to ASP.Net but have a strange problem. My site uses forms authentication for a large administration section however after the user... -
Authentication in ASP.NET: best practice?
I'd like to poll for some best practices about ASP.NET application security. Here's what it's about: I wanna develop an ASP.NET web application... -
Forms authentication then redirection to a secure web with NT authentication?
Hi, I want to allow access to particular secured intranet web sites. These intranet are stored in sharepoint (2003 version) Actually I've... -
Authentication ticket, cookieless, forms authentication?
Hi. I want to use Forms Authentication, cookieless. The issue is setting the Authentication Ticket without using cookies (!) That is, the... -
mikemad #2 Re: Forms Authentication and requireSSL, what's the recommended best practice
Anyone have any ideas? Since the Auth cookie is only passed when I'm
under SSL, what about the Session cookie. If I set a value in SESSION
to signify that I logged in, wouldn't that work? Am Imissing something??
mikemad Guest
Reply With QuoteSimilar Questions and Discussions
Posting Permissions
- You may not post new threads
- You may post replies
- You may not post attachments
- You may not edit your posts
