Questions tagged [forms-authentication]
Forms Authentication is a built-in and extensible system for authenticating users in an ASP.Net application that also maintains that authenticated session via a ticket (often stored as a cookie or query string parameter).
3,527
questions
0
votes
0
answers
15
views
Why are the IIS deployment settings different in forms authentication and .net identity based authentication? [duplicate]
.NET Web forms based authentication: https://docs.microsoft.com/en-us/aspnet/web-forms/overview/security/create-a-secure-aspnet-web-forms-app-with-user-registration-email-confirmation-and-password-...
1
vote
1
answer
24
views
Django Authentication Form Customize, Doubles Field
The Goal is To Customize Form, Then Pass it to LoginView.
I am using AuthenticationForm after Customizing it, but i see it repeats extra one input,
I guess it is for username, i need only two inputs, ...
0
votes
0
answers
7
views
After changing MVC application from Form Authentication to Windows, I started to get redirected to a login page
I changed authentication method from Form to Windows in Web.config file and added two keys into App.config:
<add key="autoFormsAuthentication" value="false" />
<add key=&...
0
votes
0
answers
16
views
How should I change the login logic in MVC application when switching from a Form Authentication to a Windows Authentication
I need to change my ASP.NET MVC app to use Windows authentication instead of Forms authentication from now on.
My view logic defines a form in the following way:
@using (Html.BeginForm("Index", "...
0
votes
0
answers
40
views
Forms Authentication with System.DirectoryServices (Active Directory)
A VB.NET application that I inherited authenticates users via Forms Authentication and System.DirectoryServices. The app is deployed to IIS 10, Windows 2016 server. After a random number of successful ...
0
votes
0
answers
5
views
MS Authenticator issue
I recently moved from country A to B and cannot access my old phone number to get SMS. I am using work or school account in MS Authenticator. How can I change the phone number to new one.
0
votes
0
answers
41
views
Update authentication Cookie in ASP.net CORE 3
In ASP.net CORE 3 app, I use authentication cookie without Identity. Here is the code when a user log in.
string securityStamp = Guid.NewGuid().ToString();
var userClaims = new List<Claim>()
{
...
0
votes
0
answers
62
views
Login between ASP.NET and PHP using web API
Here's the problem:
The old website (PHP) is to be converted step by step into a new website (ASP.NET). PHP works with MySQL and ASP.NET with MSSQL.
A PHP script on server A should now log in to ...
1
vote
0
answers
45
views
Blazor Server App - Supporting Windows and Non-Windows Users In The Same App
My organization creates apps that must support employees on two entirely separate networks (let's call them network "A" and network "B"). Applications on network "A" must ...
0
votes
1
answer
25
views
How to do authentication and redirects in ReactJs with just hooks or states?
Are there any particular way to make authentication and redirects in ReactJs without using Auth0/JWT or others alike? Also saving the data in local storage.
Building a simple react app, and I don't ...
0
votes
1
answer
29
views
In ASP.NET forms Authentication how authentication ticket inside authentication cookie is being validated?
When Forms Authentication is enabled, once the user provides a username and password it will be validated using web config or using a database(if custom implemented) and will create an Authentication ...
0
votes
0
answers
17
views
How to add additional param to forms auth
I am using forms auth in my app, and using the configuration below in my web.config file:
<authentication mode="Forms">
<forms loginUrl="https://app.myapp.com/account/login&...
0
votes
1
answer
81
views
Authorization issues in asp page VB.NET
I'm trying to authenticate an asp.net application, and I have my web.config setup to allow access to the login page first, and then deny access to all unauthorized users after that. Knowing that asp ...
1
vote
0
answers
33
views
How to connect/disconnect user to VPN using Forms authentication in MVC?
When the user logs in, he will connect with my VPN server, and when he logs out, he will disconnect. Is this possible in a ASP.NET MVC web app using C#?
ASP.NET MVC5
[HttpPost]
[AllowAnonymous]
public ...
0
votes
1
answer
45
views
Why is HttpContext.User.Identity.Name irregularly empty?
context.User.Identity.Name will very rarely be empty. I did not think this was possible since I'm checking if the user is authenticated before using it, and redirecting to the login page if they are ...
0
votes
1
answer
58
views
WebForms FormsAuthentication - Redirect after authentication results in Login Page to be called again
I have 2 ASP.NET WebForms projects under 2 different domain names. The first is merely a file server where important documents are stored. I am busy implementing FormsAuthentication so that if someone ...
0
votes
1
answer
114
views
IIS Forms Authentication throws a 401 Error
We are currently setting up forms authentication for our web app.
The plan is for users to be redirected to a login page on our main system when they want to access files.
IIS Settings
Setting the ...
0
votes
0
answers
11
views
Forms Authentication redirects to sign in page constantly
I'm implementing forms authentication on IIS 10. This strikes me as being very easy but it isn't working as expected. As a result i have taken the bare minimum of code from my project and built a test ...
0
votes
0
answers
72
views
OpenIDConnect, OWIN and Forms Authentication always redirects to sign in page
I have created an OWIN middleware app that is setup to login a user to Azure AD.
I have created a test app in IIS with Forms Authentication. When you navigate to the test app it redirects you to the ...
0
votes
1
answer
56
views
Authentication login error: "Unhandled Rejection (TypeError): Failed to fetch"
I am learning on how to set up the authenticaton on my web-app. I have finished my back end encryption and connection to my database and currently I'm building my register component in the front end.
...
0
votes
0
answers
38
views
Forms Auth - Dynamic Timeout & Sliding Expiry
I have a requirement to automatically log a user out after a set period of time. This period of time is 15 mins, unless the user selects "Remember Me" during log in which increases this ...
0
votes
0
answers
68
views
Asp.Net how to update auth sliding expiration in asp:Update panel
I have an application written in C# asp.net 4.5 (.Net 4.8) which uses forms authentication and creates an auth. cookie for the user with an expiration of 40 minutes.
On full page post-backs the ...
0
votes
0
answers
36
views
ASP.NET MVC Not logged in successfully showing 404 error
I have a ASP.NET MVC app running with Forms Authenticated enabled.
In my own machine and browser (Edge,IE,chrome), I am able to login in my website.
It works for other users as well. But, for some ...
0
votes
1
answer
60
views
Python requests ajax form authentication issue
I have seemed to be an obvious problem, login to a website programmatically and then get data when authenticated.
I've been reading StackOverflow for a few days and can't find a working solution.
Here ...
0
votes
0
answers
29
views
How should I do to sign out from two different browsers logged in with the same account?
I have a Web Forms application that implemented the forms authentication and I know how it works, but for the case below, does anyone know how to deal with that?
Log in to the application in browser ...
1
vote
0
answers
56
views
FormsAuthentication.LoginUrl and url hash propogation
I have an ASP.NET MVC Forms site and when I go to a page like below that needs to be authenticed I get redirected to the login page, WITH the hash value. I am doing some dynamic login url stuff and ...
0
votes
0
answers
40
views
How can we add to the response header after exchange.endexchange?
I am trying to add a cookie to responsecookies and responseheader. But FormAuthenticationMechanism has endExchange() in the finally block after which I'm not able to set response headers. Is there ...
0
votes
0
answers
38
views
How to do form authentication in ASP.NET MVC when session mode is SQL Server?
In web.config, I have this:
<sessionState cookieless="false" timeout="230" mode="SQLServer"
sqlConnectionString="data source=DESKTOP-QV65CD5\SQLEXPRESS;...
0
votes
0
answers
57
views
How to set cookie expiration time for life time like facebook or other social media sites using asp.net mvc?
I have developed an app where I am using FormsAuthentication to store cookie and authenticate user.
But problem is even I set expiration time for 20 days, it gets expired with 5 or 10 minutes when ...
0
votes
0
answers
52
views
ASP.NET Forms Authentication Timeout max value
I'm using asp.net form authentication with following configuration as the following:
<authentication mode="Forms">
<forms loginUrl="~/Pages/Common/Login.aspx"
...
0
votes
0
answers
59
views
Is it possible to pass FormsAuthenticationTicket.UserData to Razor page in ASP.net?
I am trying to pass a string with my asp.net Ticket using FormsAuthenticationTicket and FormsAuthentication HttpCookies.
The code i'm running on my controller on a login form goes something like this:
...
0
votes
2
answers
124
views
Access denied (401.2) when loading default documents using Owin with Identity 2.0
We recently converted a Framework 4.8 WebForms project that was using Forms Authentication to use Identity 2.0 Authentication and now we can't access default documents or images without allowing ...
0
votes
1
answer
75
views
.AUTH Cookie Get Dropped During Form Authentication Process ASP.NET
I have been stuck in a .AUTH cookie bug for a while now with a website that uses form authentication in ASP.NET to log in the user. The website uses form authentication and ask for authentication ...
0
votes
0
answers
49
views
Umbraco membership cannot get current logged in because there is a federation session cookie
I have an umbraco application that is integrated with SAML SSO using package itfoxtec.identity.saml2. the SSO is doing good. but after logged in, umbraco membershiphelper cannot get the current user.
...
0
votes
1
answer
154
views
How to direct user to a login page instead of a login popup in Flask HTTPBasicAuth?
What is the correct way of using HTTPBasicAuth to redirect to a login page? As of now, it always takes me to the verify_password function, and I'm shown a popup asking for username and password. ...
0
votes
0
answers
133
views
Change "returnUrl" before redirect in Controller
I have the implementation of authentication using "returnUrl" on the URL to redirect users after they login to the system. For some special cases of business logic, I need to replace some ...
1
vote
1
answer
200
views
SSRS 2017 for Form Authentication not working in Windows Server 2016
For SSRS 2017 Form Authentication, I have followed the instructions based on the Microsoft Sample (https://github.com/Microsoft/Reporting-Services/tree/master/CustomSecuritySample) and also (https://...
0
votes
0
answers
25
views
Not able to update the userinfo TenantToken or userToken timeout value
I am trying to set my website not to expire after few hours, it's using forms authentication with sliding expiration = true. Here is a piece of code:
private UserInfo VerifyUserToken(HttpContextBase ...
0
votes
1
answer
138
views
Receiving a 500 error when configuring an ASP.NET login page
I want to add a login page to an ASP.NET Framework site, but the compiler doesn’t even load the view, instead throwing an error on the configuration.
The web.config contains the following ...
0
votes
1
answer
105
views
Form cookie vs Session cookie in C# form authentication
I'm developing a .NET MVC web application in C# which implements form authentication.
I have the below configuration in my web.config file:
<authentication mode="Forms">
<forms ...
0
votes
3
answers
80
views
Store users information in a single file on the root of the web server JavaScript/HTML/CSS
I'm trying to do an authentication system for a website that is supposed to be stored on an intranet. The guy told me he wanted the credentials of the users (max 10 users) to be stored on a single ...
2
votes
1
answer
266
views
ASP .NET Core FormsAuthentication Cookie
I have several ASP.NET MVC 5 applications. All applications are deployed on subdomains of a common domain. A single application is responsible for user login and the session is shared among all ...
0
votes
0
answers
20
views
login functionality working in my mvc 5 application but after some action its automatically Logout
login functionality working in my mvc 5 application but after some action its automatically Logout
and redirect to login page.
i have used form authentication method to Active login session
I don't ...
0
votes
0
answers
80
views
How to add FormsAuthentication to Blazor application
I have a Blazor server application (.Net 5) where I am using the 'Individual Accounts' authentication type.
After the user has logged in, I need to create a FormsAuthenticationTicket (SetAuthCookie) ...
1
vote
1
answer
122
views
How do I convert multiple ASP.NET web forms apps using forms authentication (Membership) to point to a new .NET Core Identity site for their login
First, I want to apologize as this is my first post and I don't even know how to properly phrase my question.
Here's what's going on:
I have several legacy ASP.NET web forms applications (.NET ...
0
votes
1
answer
227
views
How to document Form-based Authemtication implemented by spring security via spring-doc-openapi?
I'm implementing auth for my REST api and I have a problecm with docs. I wrote auth by spring-security form-based authentication. On success it gives me coockie to keep seesion authenticated. I have ...
1
vote
1
answer
167
views
.NET Forms Authentication - Securing legacy site with mixed content
I've been tasked with upgrading/replacing the existing security on a legacy site of ours that uses a mix of classic asp and .net applications. The site had been using a custom ISAPI plugin to secure ...
2
votes
2
answers
1k
views
Blazor Authentication - Http calls does work for anonymous
I have been playing with blazor with .net 5.0. I am stuck with a simple but annoying issue: I am trying to load data from API but every call to the Server blazor expects the user to be signed in.
I ...
0
votes
0
answers
62
views
Remove Redundant parameters from asp:login control
I have a website that uses Forms Authentication, recently our security team say that the following parameters in the POST of the FORM data are "Redundant":
ctl00$MainContent$LoginControl$...