Top "Forms-authentication" questions

Forms Authentication is a built-in and extensible system for authenticating users in an ASP.

Can some hacker steal a web browser cookie from a user and login with that name on a web site?

Reading this question, Different users get the same cookie - value in .ASPXANONYMOUS and search for a solution, I start …

asp.net security cookies forms-authentication
Who sets the IsAuthenticated property of the HttpContext.User.Identity

This code is from the asp.net mvc RTM source code Who sets the IsAuthenticated property of the HttpContext.User.…

asp.net-mvc authentication forms-authentication
Forms auth redirecting css/script includes to the login page with HTTP 302

I have some includes on a login page, a css file and a js file. <link rel="stylesheet" type="…

asp.net-mvc forms-authentication http-status-code-302
ASP.NET MVC truly log off with Forms Authentication

I have a logoff action on a controller as so: public ActionResult Logoff() { var x = Request.IsAuthenticated; var y = User.…

asp.net asp.net-mvc forms-authentication logout
MVC 4 Forms Authentication not working with [Authorize]

I'm learning MVC4 right now, and I am following the Pro ASP NET MVC4 4th edition book to create a …

c# asp.net-mvc asp.net-mvc-4 forms-authentication authorize
ASP.NET MVC 5 Web.config: "FormsAuthenticationModule" or "FormsAuthentication"

Ok so this not a big deal, but it's bugging me and I can't let it go. So I'm using …

asp.net forms-authentication asp.net-mvc-5 iis-8 owin
Why is my ASP.NET MVC persistent auth cookie not working?

I'm using ASP.NET MVC 3, with forms authentication (based on modified vanilla account code you get with file->new). …

asp.net asp.net-mvc cookies forms-authentication
Passing FormsAuthentication cookie to a WCF service

I have a website that talks to a remote WCF web service. Both use the same custom FormsAuthentication Provider. I …

asp.net wcf forms-authentication wcf-security
How do I grant anonymous access to a url using FormsAuthentication?

For the most part, my webapp requires authentication to do anything. There are a few pages, namely the homepage, that …

forms-authentication
Impersonate using Forms Authentication

I have an ASP.NET site that must use Forms Authentication and not Windows Authentication to access a ActiveDirectoryMembershipProvider. The …

asp.net active-directory forms-authentication impersonation windows-authentication