Form Authenticaton
-
How exactly the cookie will work with the form authentication. Is it possible to have form authentication without cookies. One more What "?","*" means in authorization tag of webconfig Regards Praveen Chintamani.
-
How exactly the cookie will work with the form authentication. Is it possible to have form authentication without cookies. One more What "?","*" means in authorization tag of webconfig Regards Praveen Chintamani.
First, this should be posted here ASP.NET[^] Second, do a little research. Searching for <authorization> in MSDN blares out the answer. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/THCMCh19.asp[^]
-
How exactly the cookie will work with the form authentication. Is it possible to have form authentication without cookies. One more What "?","*" means in authorization tag of webconfig Regards Praveen Chintamani.
The cookie contains the encrypted
FormsAuthenticationTicket
that is sent with every request. TheFormsAuthenticationModule
decrypts this ticket (using the private key configured in the<machineKey>
section of the machine.config or the application's root Web.config file) and creates aFormsIdentity
from it that is used to authorize your requests against a protected resource (i.e., directory). As for the rest of your question, the link the previous post mentioned contains a lot of information. Be sure to read it over.Microsoft MVP, Visual C# My Articles