Persistent authentication cookie

Question

2.00/5 (1 vote)

See more:

I have checked remember me,and created persistent cookie.will be there any difference if i close browser or close my asp.net development server.

Posted 18-Feb-12 2:56am

Hena Khan

Add a Solution

Comments

Sergey Alexandrovich Kryukov 20-Feb-12 19:41pm

Difference between what cases?
--SA

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Sergey Alexandrovich Kryukov · Answer 1 · 2012-02-20T13:46:00

Of course there will be a difference. If you close your browser, you can open it again and see the same page. If you close the HTTP server (no matter which one), you won't be able to see any pages except those stored in the browser cache and not attempted to reload. :-)

I'm pretty much sure you wanted to know something else, but my reply should remind you to ask questions correctly.

[EDIT]

OK, as to the question: one of the names of the cookie is the browser cookie. They are stored on the client side and belong to a particular browser and not related to a server:
http://en.wikipedia.org/wiki/HTTP_cookie[^].

If should clear your concern.

—SA

BobJanova · Answer 2 · 2012-02-21T01:05:00

Cookies are stored in a persistent file, unless you're browsing in incognito/private mode, and generally stored against a domain. So as long as you restart the server on the same domain (localhost?) and use the same browser, the cookies should still be available.

Remember that allowing persistent authentication/authorisation cookies can be a security risk if it bypasses the normal password prompt. You may want to consider hashing the cookie content together with the user's IP or something similar to avoid session hijacking.

Persistent authentication cookie

2 solutions

Solution 1

Solution 2

Add your solution here

Preview 0