ASP.NET Cookie not set when using https

Question

I have an ASP.NET application which stores a "Remember Me" token as a cookie; it worked fine until I implemented SSL.

Using FireCookies, I never see my cookie (named "_rmtoken") though ".ASPXAUTH", "ASP.NET_SessionId" and other cookies do show up. Here is the code I use to set the cookie:


public static void SetRememberMeCookie(HttpContext context, Guid token)
{
    DeleteRememberMeCookie(context);
    var loginCookie = new HttpCookie("_rmtoken")
    {
        Value = token.ToString(),
        Expires = DateTime.Today.AddMonths(1), 
        HttpOnly=false, 
        Secure = false
    };
    context.Response.Cookies.Add(loginCookie);
}

heads5150 · Accepted Answer · 2010-07-30 15:24:28Z

1

Change this line from false to true

Secure = false

Msdn Reference - HttpCookie.Secure property

answered Jul 30, 2010 at 15:24

heads5150

7,5333 gold badges28 silver badges34 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Keith Over a year ago

per the code, Secure is already set to false. It doesn't work.

heads5150 Over a year ago

sorry wasn't completely clear, change the line from Secure=false to Secure=true

Luke Over a year ago

Why doesn't the cookie get set when it's false? What if we don't want the cookie flagged as secure?

Hoan Huynh · Accepted Answer · 2012-03-26 17:41:54Z

1

Simply try to set cookie's domain property for your cookies:

Response.Cookies["your_cookie_name"].Domain = "yourdomain.com";

... or check out this article to get more information.

answered Mar 26, 2012 at 17:41

Hoan Huynh

3622 silver badges4 bronze badges

Collectives™ on Stack Overflow

ASP.NET Cookie not set when using https

2 Answers 2

3 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related