Ask a Question related to ASP.NET Security, Design and Development.
-
Nicolas LeBlanc #1
FormsAuthenticationTicket UserData bug in framework 1.1, how to report it?
Seems pretty incredible a simple "how to report a bug" isn't available at
all on Microsoft.com !! How the hell can we report a bug when we find one?
There is a bug in the FormsAuthentication request, I have followed the
example to use a generic principal but I changed *ONE* line of code and it
gave me an error, I lost 3 hours to finally find this bug and I would like
to report it.
If you create an Authentication Ticket, put the roles in the UserData
string, the string will be just fine if you redirect using:
Response.Redirect(FormsAuthentication.GetRedirectU rl(txtUserName.Text.Trim()
, false));
But if you use:
FormsAuthentication.RedirectFromLoginPage(txtUserN ame.Text.Trim(), false);
the UserData property of your decrypted ticket will en empty... a total
empty string, so there is a bug there because if you comment one line, it's
working, if you comment the other, it's working just fine...
I followed the example given at:
[url]http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT04.asp[/url]
Altough I am the one who changed the line because I felt it was a FrameWork
1.1 new function and probably more intelligent to use that one.
Thanks.
Nicolas LeBlanc Guest
-
FormsAuthenticationTicket does not return userdata
Hello, I am trying to get FormAuthentication working, but the FormsAuthenticationTicket does not return the UserData. Does any one have any... -
FormsAuthenticationTicket
I've followed the suggestions in MSDN > MSDN Library > .NET Developpment > .NET Securuty > Bulding Secura ASP.BET application article but the cookie... -
UserData size limit in a FormsAuthenticationTicket
Is there a size limit to the userData in a FormsAuthenticationTicket ? I'm asking this because when I try to encrypt the FormsAuthenticationTicket... -
FormsAuthenticationTicket timeout
Hi, What is the difference between the timeout parameter in FormsAuthenticationTicket constructor and timeout attribute in the authentication... -
How do you add userdata in maya?
Does anyone know how to add userdata in Maya, I can't seem to find it in the documentation or on google? Thanks Tim



Reply With Quote

