Re: Passing custom headers to login page
Mont Rothstein <[email protected]>
| Newsgroups | gmane.comp.windows.devel.dotnet.advanced |
|---|---|
| Message-ID | <[email protected]> |
Site 2 is actually ours and Site 1 is an example of how our client can do this. We are using the standard authenticate Forms with a Login control in Site 2. I don't yet know if we are going to have an issue with submitting from another site or not. I wanted to simply do the authentication in the Page_Load based on the custom headers sent over SSL but there does not appear to be a way to programatically authenticate a user when using Forms based authentication, so I had to do the ugly Javascript field population hack. I'll give your suggestion a try. Thanks, -Mont On Thu, Oct 9, 2008 at 3:03 PM, Adam Tuliper <[email protected]> wrote: > because of the way you want to do it.. its a little trickier. > > so you want to have site 1 write out a page to then post to site 2. > > do you control site 2? check to make sure site 2 can accept and properly > recognize outside postings. > > write out a page that has a textbox (just off the top of my head) > <body onload="javascript:form1.submit();"> > <form id=form1 name=form1 method=post action=" > www.site2.com/whatever.aspwhatever"> > <input type=text value=<%=Response.Header["whatever"]%.> > </form> > </body> > ... > .... > > > try that. we were forced ages back to do something similiar. its > unfortunate > because information sits on a clients machine. oh ya.. turn off all caching > so login information isn't stored. turn off autocomplete on your textboxes > as well. > autocomplete="off" > > <StuffNotToDo> > Your end result wont end up in your browser the way you are trying. > httpwebrequest isn't what Im referring to.. unless.. unless... you can do a > trick using httpwebrequest to get a session id that you can pass to a page > on site2 that will create a session. but that would be a total hack.. and I > would laugh .. hard. and then blog about what not to do and then laugh some > more : ) > </StuffNotToDo> > > > > > > > On Thu, Oct 9, 2008 at 1:15 PM, Mont Rothstein <[email protected] > >wrote: > > > Thanks for the reply. > > Yes, SSL is being used. > > > > Do you happen to know of an example for that? > > > > I've used HttpWebRequest before but I'm guessing that isn't what you are > > referring to because the end result of this needs to appear in the > browser. > > > > Thanks, > > -Mont > > > > =================================== > > View archives and manage your subscription(s) at > > http://peach.ease.lsoft.com/archives > > > > =================================== > View archives and manage your subscription(s) at > http://peach.ease.lsoft.com/archives > =================================== View archives and manage your subscription(s) at http://peach.ease.lsoft.com/archives