Using forms authentication for the first time

[William Gower]

I have set up my web config file to use Forms Authentication. In my login
page after I validate my user, I want to store the id but I don't want to
call the RedirectFromLoginPage. I want to redirect the page myself. How do
I store the id without calling RedirectFromLoginPage?

[Raterus]

If you don't need to redirect, you can use "SetAuthCookie" to achieve the same effect.

[url]http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpref/html/frlrfSystemWebSecurityFormsAuthenticationClassSetA uthCookieTopic2.asp[/url]


"William Gower" <w_gower@hotmail.com> wrote in message news:%233We1zLeEHA.3664@TK2MSFTNGP12.phx.gbl...

> I have set up my web config file to use Forms Authentication. In my login
> page after I validate my user, I want to store the id but I don't want to
> call the RedirectFromLoginPage. I want to redirect the page myself. How do
> I store the id without calling RedirectFromLoginPage?
>
>

[Hernan de Lahitte]

You should create the ticket by your self. Here is a sample code:

Place this code instead of "FormsAuthentication.RedirectFromLoginPage(
UserId.Text, false )"

HttpCookie cookie = FormsAuthentication.GetAuthCookie( UserId.Text, false );
FormsAuthenticationTicket ticket = FormsAuthentication.Decrypt(
cookie.Value );
// Store roles inside the Forms cookie.
FormsAuthenticationTicket newticket = new FormsAuthenticationTicket(
ticket.Version,

ticket.Name,

ticket.IssueDate,

ticket.Expiration,

ticket.IsPersistent,

userData,

ticket.CookiePath );
cookie.Value = FormsAuthentication.Encrypt(newticket);
Response.Cookies.Set(cookie);
Response.Redirect( FormsAuthentication.GetRedirectUrl( newticket.Name,
newticket.IsPersistent ) );

In case you don't have any userData (some string data up to 1200 bytes
aprox) to store inside the ticket, you might use this
FormsAuthenticationTicket overload:

FormsAuthenticationTicket newticket2 = new FormsAuthenticationTicket(
ticket.Name, ticket.IsPersistent, ticket.Expiration.Subtract(
ticket.IssueDate ).Minutes );


Hope this help.

--
Hernan de Lahitte
Lagash Systems S.A.
[url]http://weblogs.asp.net/hernandl[/url]


This posting is provided "AS IS" with no warranties, and confers no rights.

"William Gower" <w_gower@hotmail.com> wrote in message
news:%233We1zLeEHA.3664@TK2MSFTNGP12.phx.gbl...

> I have set up my web config file to use Forms Authentication. In my login
> page after I validate my user, I want to store the id but I don't want to
> call the RedirectFromLoginPage. I want to redirect the page myself. How

do

> I store the id without calling RedirectFromLoginPage?
>
>

[Hernan de Lahitte]

Agreed with Raterus.
Something like:

FormsAuthentication.SetAuthCookie( UserId.Text, false );
Response.Redirect( "yourPage.aspx" );

should be ok.


--
Hernan de Lahitte
Lagash Systems S.A.
[url]http://weblogs.asp.net/hernandl[/url]


This posting is provided "AS IS" with no warranties, and confers no rights.

"Hernan de Lahitte" <hernan@lagash.com> wrote in message
news:OSqRurNeEHA.384@TK2MSFTNGP10.phx.gbl...

> You should create the ticket by your self. Here is a sample code:
>
> Place this code instead of "FormsAuthentication.RedirectFromLoginPage(
> UserId.Text, false )"
>
> HttpCookie cookie = FormsAuthentication.GetAuthCookie( UserId.Text,

false );

> FormsAuthenticationTicket ticket = FormsAuthentication.Decrypt(
> cookie.Value );
> // Store roles inside the Forms cookie.
> FormsAuthenticationTicket newticket = new FormsAuthenticationTicket(
> ticket.Version,
>
> ticket.Name,
>
> ticket.IssueDate,
>
> ticket.Expiration,
>
> ticket.IsPersistent,
>
> userData,
>
> ticket.CookiePath );
> cookie.Value = FormsAuthentication.Encrypt(newticket);
> Response.Cookies.Set(cookie);
> Response.Redirect( FormsAuthentication.GetRedirectUrl( newticket.Name,
> newticket.IsPersistent ) );
>
> In case you don't have any userData (some string data up to 1200 bytes
> aprox) to store inside the ticket, you might use this
> FormsAuthenticationTicket overload:
>
> FormsAuthenticationTicket newticket2 = new FormsAuthenticationTicket(
> ticket.Name, ticket.IsPersistent, ticket.Expiration.Subtract(
> ticket.IssueDate ).Minutes );
>
>
> Hope this help.
>
> --
> Hernan de Lahitte
> Lagash Systems S.A.
> [url]http://weblogs.asp.net/hernandl[/url]
>
>
> This posting is provided "AS IS" with no warranties, and confers no

rights.

>
> "William Gower" <w_gower@hotmail.com> wrote in message
> news:%233We1zLeEHA.3664@TK2MSFTNGP12.phx.gbl...

> > I have set up my web config file to use Forms Authentication. In my

login

> > page after I validate my user, I want to store the id but I don't want

to

> > call the RedirectFromLoginPage. I want to redirect the page myself.

How

> do

> > I store the id without calling RedirectFromLoginPage?
> >
> >

>
>