Session and Form Authentication Problem : Asp.Net MVC 3

Question

As I am working on Asp.Net MVC 3 application, I have used FormAuthentication in my application.

The problem is, after logged in into system, when I close browser (without logout) and again open the page (let's say /Admin/ProductList/) in browser, the page is still being invoked and I got focus in my controller too. [Which is really bad! :( ]

What I want is, when I close browser and come back again on any page, it should goes to logged in page.

Please review the given code for your understanding.

public void SignIn(string userName, bool isCookiePersistent)
        {

            FormsAuthenticationTicket authTicket = new FormsAuthenticationTicket(1, userName, DateTime.Now, DateTime.Now.AddDays(14),
                createPersistentCookie, string.Empty);

            HttpCookie authCookie = FormsAuthentication.GetAuthCookie(userName, isCookiePersistent);
            if (authTicket.IsPersistent)
            {
                authCookie.Expires = authTicket.Expiration;
            }

            authCookie.Value = FormsAuthentication.Encrypt(authTicket);
            HttpContext.Current.Response.Cookies.Add(authCookie);
        }

public void SignOut()
        {
            FormsAuthentication.SignOut();
        }

Web.Config code:

<authentication mode="Forms">
      <forms loginUrl="~/Admin/Login" timeout="2880" />
    </authentication>

My page is getting in **Redirection Loop**: This is the main issue.

Am I missing any other settings or global.asax event handling?

Please help me by giving me any resolution.

Thanks in advance.

Darin Dimitrov · Accepted Answer · 2011-01-30 17:09:28Z

3

Here:

authCookie.Expires = authTicket.Expiration;

That's what makes the authentication cookie persistent and the browser stores it on the client computer so that when you restart the browser the cookie is still there. If you don't want persistent cookies you could try this:

public void SignIn(string userName)
{
    var authTicket = new FormsAuthenticationTicket(
        1, userName, DateTime.Now, DateTime.Now.AddDays(14), false, string.Empty
    );
    var authCookie = FormsAuthentication.GetAuthCookie(userName, false);
    authCookie.Value = FormsAuthentication.Encrypt(authTicket);
    HttpContext.Current.Response.Cookies.Add(authCookie);
}

answered Jan 30, 2011 at 17:09

Darin Dimitrov

1.0m276 gold badges3.3k silver badges3k bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

nunu Over a year ago

Thanks for reply! But this is not working, actually when I close browser and come back again with any url, the page shows as a BLANK! NOTHING IS HAPPENING.... it opens as a blank white page...

Darin Dimitrov Over a year ago

@nunu, is the action you are trying to navigate to decorated with the [Authorize] attribute? That's what will cause the redirect to the login screen if the user is not authenticated.

nunu Over a year ago

No, I have NOT used [Authorize] attribute. Actually when I come back to any page, it is opening with BLANK WHITE PAGE, no matter for what page I made request...

Darin Dimitrov Over a year ago

@nunu, you should decorate all controller actions that you want to be authenticated for with the [Authorize] attribute. In order to avoid decorating all of them you could only decorate the controller. As far as the blank page is concerned you might have some cookie left on your browser. Try clearing all cookies before trying again.

Collectives™ on Stack Overflow

Session and Form Authentication Problem : Asp.Net MVC 3

1 Answer 1

4 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Related