Home All Groups Group Topic Archive Search About

When to use FormsAuthenticationTicket()

Author
23 Dec 2005 5:05 PM
Andrew
Hi, guys,

After I use FormsAuthentication.SetAuthCookie() to anthenticate a user, I
don't think I need to create a new FormsAuthenticationTicket(), right?

Then, at what situation, we should use ticket? Any reference papers?

Thanks.

Author
23 Dec 2005 10:23 PM
Brock Allen
The only time you'd need to work with the FormsAuthTicket is if you wanted
to manually issue the Form Auth Cookie. When you call FormsAuth.SetAuthCookie
it creates the ticket, encrypts it then issues that as the cookie. The main
reason you'd want to do this yourself is that the FormAuthTicket allows you
to put in some user-defined data inside of it. This is nice since FormAuth
does encryption and MAC protection on the ticket (so you don't have to).

-Brock
DevelopMentor
http://staff.develop.com/ballen

Show quoteHide quote
> Hi, guys,
>
> After I use FormsAuthentication.SetAuthCookie() to anthenticate a
> user, I don't think I need to create a new
> FormsAuthenticationTicket(), right?
>
> Then, at what situation, we should use ticket? Any reference papers?
>
> Thanks.
>

Bookmark and Share