FormsAuthentication problem with popup login window

[Mark Farragher]

I have a problem with FormsAuthentication:

I have two web applications:
[url]http://localhost/bx/authentication[/url]
[url]http://localhost/myapp[/url]

I have a 'login' hyperlink in MyApp that opens
[url]http://localhost/bx/authentication/login.aspx[/url] in a popup window. The popup
window has a username and password text field and an ok button. The postback
code for the ok button is:

....
FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(
1, txtUID.Text, DateTime.Now, DateTime.Now.AddMinutes(30), false,
myPayload);
string ticketstring = FormsAuthentication.Encrypt(ticket);
HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName,
ticketstring);
Response.Cookies.Add(cookie);
....

The web.config file in both applications has an authentication section:

....
<authentication mode="Forms">
<forms name="BXAuthentication" protection="All" />
</authentication>
....

This does not work. User.Identity is always null in MyApp. The weird thing
is that when I add this code to MyApp's Page_Load method:

Response.Write
(Request.Cookies[FormsAuthentication.FormsCookieName].Value.ToString());

I can actually see the serialized login ticket!! So the cookie is passed
correctly from the popup window to MyApp, but somehow this does not count as
being authenticated. How can I get MyApp to 'accept' the cookie? What am I
missing? Is authentication accross AppDomains possible at all?

Thanks for any help,

Mark

[Mark Farragher]

I have a problem with FormsAuthentication:

I have two web applications:
[url]http://localhost/bx/authentication[/url]
[url]http://localhost/myapp[/url]

I have a 'login' hyperlink in MyApp that opens
[url]http://localhost/bx/authentication/login.aspx[/url] in a popup window. The popup
window has a username and password text field and an ok button. The
postback
code for the ok button is:

....
FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(
1, txtUID.Text, DateTime.Now, DateTime.Now.AddMinutes(30), false,
myPayload);
string ticketstring = FormsAuthentication.Encrypt(ticket);
HttpCookie cookie = new HttpCookie(FormsAuthentication.FormsCookieName,
ticketstring);
Response.Cookies.Add(cookie);
....

The web.config file in both applications has an authentication section:

....
<authentication mode="Forms">
<forms name="BXAuthentication" protection="All" />
</authentication>
....

This does not work. User.Identity is always null in MyApp. The weird thing
is that when I add this code to MyApp's Page_Load method:

Response.Write
(Request.Cookies[FormsAuthentication.FormsCookieName].Value.ToString());

I can actually see the serialized login ticket!! So the cookie is passed
correctly from the popup window to MyApp, but somehow this does not count
as
being authenticated. How can I get MyApp to 'accept' the cookie? What am I
missing? Is authentication accross AppDomains possible at all?

Thanks for any help,

Mark

[Me2]

Look here for information regarding authentication across applications:

[url]http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpguide/html/cpconaspnetauthentication.asp[/url]

--
Ralph Page MBA, CMBA, MCDBA, MCSE, CCNA
-------------------------------------------------------------------------
"However beautiful the strategy, you should occasionally look at the
results."
-- Winston Churchill
-------------------------------------------------------------------------
"Mark Farragher" <mark@4castconsulting.com> wrote in message
news:#JFa1H5gDHA.3104@TK2MSFTNGP11.phx.gbl...

> I have a problem with FormsAuthentication:
>
> I have two web applications:
> [url]http://localhost/bx/authentication[/url]
> [url]http://localhost/myapp[/url]
>
> I have a 'login' hyperlink in MyApp that opens
> [url]http://localhost/bx/authentication/login.aspx[/url] in a popup window. The popup
> window has a username and password text field and an ok button. The

postback

> code for the ok button is:
>
> ....
> FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(
> 1, txtUID.Text, DateTime.Now, DateTime.Now.AddMinutes(30), false,
> myPayload);
> string ticketstring = FormsAuthentication.Encrypt(ticket);
> HttpCookie cookie = new

HttpCookie(FormsAuthentication.FormsCookieName,

> ticketstring);
> Response.Cookies.Add(cookie);
> ....
>
> The web.config file in both applications has an authentication section:
>
> ....
> <authentication mode="Forms">
> <forms name="BXAuthentication" protection="All" />
> </authentication>
> ....
>
> This does not work. User.Identity is always null in MyApp. The weird thing
> is that when I add this code to MyApp's Page_Load method:
>
> Response.Write
> (Request.Cookies[FormsAuthentication.FormsCookieName].Value.ToString());
>
> I can actually see the serialized login ticket!! So the cookie is passed
> correctly from the popup window to MyApp, but somehow this does not count

as

> being authenticated. How can I get MyApp to 'accept' the cookie? What am I
> missing? Is authentication accross AppDomains possible at all?
>
> Thanks for any help,
>
> Mark
>
>