The Anatomy of Forms Authentication

using System;
using System.Collections.Generic;
using System.Text;
using System.Security;
using System.Security.Cryptography;

namespace GSS.Web.Security
{
    [System.Serializable()]
    public class FormsAuthenticationTicket
    {
        private int _version = 0;
        private string _userName = string.Empty;
        private string _userData = string.Empty;
        private string _appPath = string.Empty;
        private DateTime _expires = DateTime.MinValue;
        private DateTime _issueDate = DateTime.MinValue;
        private bool _isPersistent = false;

        public int Version
        {
            get { return _version; }
        }
        public string Username
        {
            get { return _userName; }
        }
        public string UserData
        {
            get { return _userData; }
        }
        public string AppPath
        {
            get { return _appPath; }
        }
        public DateTime Expires
        {
            get { return _expires; }
        }
        public DateTime IssueDate
        {
            get { return _issueDate; }
        }
        public bool IsPersistent
        {
            get { return _isPersistent; }
        }
        public bool IsExpired
        {
            get{return DateTime.Now > _expires;}
        }

        public FormsAuthenticationTicket(string username, string userdata, string appPath,
            DateTime issued, DateTime expires, int version, bool isPersistent)
        {
            if (username == null || username == string.Empty)
                throw new ArgumentException("username");
            else
                _userName = username;
            if (userdata == null)
                _userData = "";
            else
                _userData = userdata;
            if (appPath == null)
                _appPath = "/";
            else if (!appPath.StartsWith("/"))
                _appPath = "/" + appPath;
            else
                _appPath = appPath;            
            if (issued == DateTime.MinValue)
                _issueDate = DateTime.Now;
            else
                _issueDate = issued;
            if (expires == DateTime.MinValue)
                _expires = DateTime.Now.AddMinutes(GSS.Web.Security.Properties.Settings.Default.CookieTimeOut);
            else
                _expires = expires;
            if (version > 0)
                _version = version;
            else
                _version = 1;
            
        }
    }
}