Forms Authentication - not working in Google chrome and firefox

Question

0.00/5 (No votes)

See more:

Hi,

I used forms authentication for my website. In IE itts working fine.

I will the explain the scenario where I got structed.

Do the following:

1. open the login page.
2. Enter the credentials, it will be redirected to the requested page.
3. Copy the URL and try to open it in the new browser(google chrome/ firefox).
4. Its allowing to open the page without redirecting to the login page.

How to fix this bug? I tried to debug also, the session values are not clearing in Google chrome & firefox whereas in IE, the session values are clearing.

Please help me out.... Its very urgent.

Regards,
Jyo.

Posted 11-May-10 19:52pm

Dhiraj&Devesh

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Michel Godfroid · Answer 1 · 2010-05-11T20:13:00

Solution 1

It's not a bug, it's a feature.
Chrome and Firefox (and most browsers) maintain the session. This is because they are single process browsers (new windows do not create a new process). IE is a multi-process browser, new windows start a new process. You'll find the same behaviour in IE if you open multiple tabs, instead of multiple windows.

Posted 11-May-10 20:13pm

Michel Godfroid

Comments

Sandeep Mewara 12-May-10 2:23am

Adding to that, i think IE8 too added itself to that single processor browser category. Thus, IE8 too maintains session across multiple instances of browsers/tabs. Correct?

Michel Godfroid 12-May-10 2:26am

I think it does. I switched to chrome ages ago :-)

Dhiraj&Devesh 12-May-10 5:51am

thank u for ur reply...
but its a security issue right. It should not open like that... Take an example, some of the bank sites is not allowing like this.
So can u plz give me the alternate solution for this....

Michel Godfroid 12-May-10 6:06am

The bank sites use https, not http. https session are not shared.

Dhiraj&Devesh 12-May-10 6:45am

My Website is also having the SSL(https) only. In IE its working fine, but for other browsers like chrome and firefox not working.

Michel Godfroid 12-May-10 8:39am

I fear you'll have to use cookies then: the login page should deposit a cookie on the client when the login successful, and your next page will only load if the cookie is present, otherwise it will redirect to the login page. The next page also removes the cookie from the client.