Forms Authentication -- Chapter 5, Professional ASP.NET 2.0 Security, Membership, and Role Managemen

Forms Authentication -- Chapter 5, Professional ASP.NET 2.0 Security, Membership, and Role Managemen


As a registered member of SearchAppSecurity.com, you're entitled to a complimentary copy of Chapter 5 of Professional ASP.NET 2.0 Security, Membership, and Role Management written by Stefan Schackow and published by John Wiley & Sons Inc. "Chapter 5 -- Forms Authentication"

    Requires Free Membership to View

    Login

    When you register, you'll receive targeted emails designed to keep you informed of the most relevant information on Agile development, application security, testing & QA, software requirements, and more.

    Hannah Smalltree, Editorial Director

    By submitting your registration information to SearchSoftwareQuality.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSoftwareQuality.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

explains security features that have been added to forms authentication in ASP.NET 2.0.

This chapter covers the following topics on ASP.NET 2.0 forms authentication:

  • Making changes to the behavior of persistent forms authentication tickets
  • Securing the forms authentication payload
  • Securing forms authentication cookies with HttpOnly and requireSSL
  • Using Cookieless support in forms authentication
  • Using forms authentication across ASP.NET 1.1 and ASP.NET 2.0
  • Leveraging the UserData property of FormsAuthenticationTicket
  • Passing forms authentication tickets between applications
  • Enforcing a single login and preventing replayed tickets after logout


Book description:
 Experienced developers who are looking to create reliably secure sites with ASP.NET 2.0 will find that Professional ASP.NET 2.0 Security, Membership, and Role Management covers a broad range of security features including developing in partial trust, forms authentication, and securing configuration. The book offers detailed information on every major area of ASP.NET security you'll encounter when developing Web applications.

You'll see how ASP.NET 2.0 version contains many new built-in security functions compared to ASP.NET 1.x such as Membership and Role Manager, and you'll learn how you can extend or modify various features. The book begins with two chapters that walk you through the processing ASP.NET 2.0 performs during a web request and the security processing for each request, followed by a detailed explanation of ASP.NET Trust Levels.

With this understanding of security in place, you can then begin working through the following chapters on configuring system security, forms authentication, and integrating ASP.NET security with classic ASP including integrating Membership and Role Manager with classic ASP.

>> Read Chapter 5: Forms Authentication

>> Buy the book




This was first published in November 2006

Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

Back to top