«

Hi, For some reason my session are expireing when the web browser
closes and User.Identity.IsAuthenticated is truning true,
I have a webcrontrol from login:

Protected Sub Login1_LoggedIn(ByVal sender As Object, ByVal e As
System.EventArgs) Handles Login1.LoggedIn
Dim UserTicket As FormsAuthenticationTicket = New
FormsAuthenticationTicket(1, Login1.UserName, DateAndTime.Now,
DateAndTime.Now.AddSeconds(1), False, "WebUser",
FormsAuthentication.FormsCookiePath)
FormsAuthentication.Encrypt(UserTicket)
end sub

and in my secure page i have tha fallowing:


Protected Sub Page_Load(ByVal sender As Object, ByVal e As
System.EventArgs) Handles Me.Load

If Not User.Identity.IsAuthenticated Then
FormsAuthentication.RedirectToLoginPage()
Exit Sub
End If

did i do anything wrong ?

p.s: my authentication type is :form !
thank you

hi zulander,
can you post your web.config? i usually secure pages or folders via
web.config with a <locations> setting instead of by code.
i know you said you have Forms Auth in your web.config, but it looks like
that isn't set up correctly, or else the Forms ticket is still valid in
Page_Load.
also, why are you granting the ticket for 1 second?
it may help to find out what User.Identity.Name is in your Page_Load, it
could be the IIS guest account or the Forms user.

tim


"Zulander" <> wrote in message
news: oups.com...
> Hi, For some reason my session are expireing when the web browser
> closes and User.Identity.IsAuthenticated is truning true,
> I have a webcrontrol from login:
>
> Protected Sub Login1_LoggedIn(ByVal sender As Object, ByVal e As
> System.EventArgs) Handles Login1.LoggedIn
> Dim UserTicket As FormsAuthenticationTicket = New
> FormsAuthenticationTicket(1, Login1.UserName, DateAndTime.Now,
> DateAndTime.Now.AddSeconds(1), False, "WebUser",
> FormsAuthentication.FormsCookiePath)
> FormsAuthentication.Encrypt(UserTicket)
> end sub
>
> and in my secure page i have tha fallowing:
>
>
> Protected Sub Page_Load(ByVal sender As Object, ByVal e As
> System.EventArgs) Handles Me.Load
>
> If Not User.Identity.IsAuthenticated Then
> FormsAuthentication.RedirectToLoginPage()
> Exit Sub
> End If
>
> did i do anything wrong ?
>
> p.s: my authentication type is :form !
> thank you
>

Tim_Mac, This is my web.config

<authentication mode="Forms">
<forms loginUrl="login.aspx"/>
</authentication>


<location path="login.aspx">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>

The part with the one second is that i was testing if it was the cause
of not expiring,
it was actualy: Dim UserTicket As FormsAuthenticationTicket =
New FormsAuthenticationTicket(1, Login1.UserName, DateAndTime.Now,
DateAndTime.Now, False, "WebUser", FormsAuthentication.FormsCookiePath)

The, user is the authenticated user that was loged therfore it is not
the guest account !
thank you

Tim_Mac wrote:
> hi zulander,
> can you post your web.config? i usually secure pages or folders via
> web.config with a <locations> setting instead of by code.
> i know you said you have Forms Auth in your web.config, but it looks like
> that isn't set up correctly, or else the Forms ticket is still valid in
> Page_Load.
> also, why are you granting the ticket for 1 second?
> it may help to find out what User.Identity.Name is in your Page_Load, it
> could be the IIS guest account or the Forms user.
>
> tim
>
>
> "Zulander" <> wrote in message
> news: oups.com...
> > Hi, For some reason my session are expireing when the web browser
> > closes and User.Identity.IsAuthenticated is truning true,
> > I have a webcrontrol from login:
> >
> > Protected Sub Login1_LoggedIn(ByVal sender As Object, ByVal e As
> > System.EventArgs) Handles Login1.LoggedIn
> > Dim UserTicket As FormsAuthenticationTicket = New
> > FormsAuthenticationTicket(1, Login1.UserName, DateAndTime.Now,
> > DateAndTime.Now.AddSeconds(1), False, "WebUser",
> > FormsAuthentication.FormsCookiePath)
> > FormsAuthentication.Encrypt(UserTicket)
> > end sub
> >
> > and in my secure page i have tha fallowing:
> >
> >
> > Protected Sub Page_Load(ByVal sender As Object, ByVal e As
> > System.EventArgs) Handles Me.Load
> >
> > If Not User.Identity.IsAuthenticated Then
> > FormsAuthentication.RedirectToLoginPage()
> > Exit Sub
> > End If
> >
> > did i do anything wrong ?
> >
> > p.s: my authentication type is :form !
> > thank you
> >