Hello folk,
I've implemented my custom membership provider. I use third server for
authentication (call web method that validates user/password). I need this user/password
for retrieve some additional data from this server. Asp.net MVC uses FormsAuthentication
and cookie for keep 'login state' by default. It works well when I login on
site first time. But when I close and open site again sometime after, cookie
keeps it 'login' but I don't have credential for access to server data. I can
change cookieless attribute (to 'UseUri' for example) in configure file but in
this case I should login again if I open second tab with this app in same
browser.
My questions:
Is way to call SingOut of FormsAuthentication (remove authentication ticket
from browser) when user closes asp.net mvc app?Is secure way to pass user/password data through session? Because server is
unstable and interrupt connection often and app should have possibility for
s ...
Go to the complete details ...