ASP.NET MVC 3 Authentication with cookie less sessions

Question

I need to implement a simple secure area on a MVC 3 website. I can not use cookies and can not pass session ID in the URL. Are there any other implemented options in ASP.NET?

P.S. I know it is possible in other environments.

Arthur

Darin Dimitrov · Accepted Answer · 2011-03-15 12:11:48Z

2

If you don't use cookies and don't want to pass anything in the URL (or hidden fields in a POST request) your server simply cannot distinguish the users. Don't forget that HTTP is a stateless protocol. You could implement some sort of custom HTTP headers that would be sent along each request and allow you to track users but when you think about it: that's exactly what cookies do, so instead of reinventing the wheel, use cookies :-)

answered Mar 15, 2011 at 12:11

Darin Dimitrov

1.0m277 gold badges3.3k silver badges3k bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Arthur Over a year ago

What about headers or hidden input? PHP does it nicely, but I don't want to use PHP.

Darin Dimitrov Over a year ago

@Arthur, as I said you could use hidden inputs and custom HTTP headers. Nothing built-in ASP.NET though. You will have to implement your own authentication module to handle it.

Arthur Over a year ago

So far it looks like headers are the brightest option :( Thank you

Collectives™ on Stack Overflow

ASP.NET MVC 3 Authentication with cookie less sessions

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related