Cookieless Forms Authentication. : The Official Microsoft ASP.NET Forums

Reply

Vishnu.Y

Member

2 Points

14 Posts

Cookieless Forms Authentication.

Sep 04, 2012 07:06 AM|LINK

Hi Experts,

In my asp.net application using C#, I am using (Cookieless) Role Based Forms Authentication. After giving the username and password, the application is not redirecting to the page requested, it is still showing the Login.aspx page.

Here is my sample code. (Login.aspx)

FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(
                            1,
                            uname,
                            DateTime.Now,
                            DateTime.Now.AddMinutes(40),
                            true,
                            string.Empty,
                            string.Empty);
            string hash = FormsAuthentication.Encrypt(ticket);
            FormsAuthentication.SetAuthCookie(uname, false);
            string returnUrl = Request.QueryString["ReturnUrl"];

                if (role == "client")
                {
                        returnUrl="./Client_Pages/Client.aspx";
                }
                else if (role == "Admin" || role == "admin")
                {
                    returnUrl="./Admin_Pages/AdminPage.aspx";
                }
                Response.Redirect(Response.ApplyAppPathModifier(returnUrl));
            }

The setting I used in web.config is

The code in Global.asax is

          protected void Application_AuthenticateRequest(object sender, EventArgs e)
    {
        if (HttpContext.Current.User != null)
        {
            if (HttpContext.Current.User.Identity.IsAuthenticated)
            {
                if (HttpContext.Current.User.Identity is FormsIdentity)
                {
                    FormsIdentity identity = (FormsIdentity)HttpContext.Current.User.Identity;

                    FormsAuthenticationTicket ticket = identity.Ticket;

                    // get the roles stored as UserData into the ticket

                    string[] roles = ticket.UserData.Split(',');
                    HttpContext.Current.User = new System.Security.Principal.GenericPrincipal(identity, roles);

                }

            }

        }

    }