Each of these code snippets "works" and have the same outcome, which is to populate Context.User with a GenericPrincipal.
Question: What are the relative advantages or disadvantages of each snippet? I am using .NET 3.5, and implementing custom authentication and authorization logic, and not using the provider model.
Snippet #1
// Extract the forms authentication cookie
string cookieName = FormsAuthentication.FormsCookieName;
HttpCookie authCookie = Context.Request.Cookies[cookieName];
Go to the complete details ...