Hello, friends. My question is about how asp.net environment determines if the user was authenticated.
For example, I've created user with persistent authentication cookie. The cookie contains ticket, but there is only username in it and some additional info. There is no user password.
So the question is about the cookie verification mechanism: where is the password store and how does asp.net environment confronts user cookie with necessary password.
...
Go to the complete details ...