Hi
I am confused about forms authentication and the forms authentication module.
I have read that the HttpApplication AuthenticateRequest occurs AFTER the page request has been authenticated and the user has been identified. I have also read that the FormsAuthentication Http module subscribes to the AuthenticateRequest event. This doesn't make sense to me because the forms authentication module actually carries out the authentication so how can it subscribe to an event that occurs after successful authorisation. I have looked at the code of the FormsAuthentication module and it is indeed hooked up to the AuthenticateRequest event and it does identify the user and populate the IPrincipal object etc, but the event application documentation definitely states that the AuthenticateRequest event occurs after authentication. Perhaps the asp.net pipeline is set up such that the http modules are the very first code to respond to asp.net events so that by the time any o ...
Go to the complete details ...