FormsAuthentication.SetAuthCookie problem

Question

In my MVC 3 application I have a very basic controller

[HttpPost]
public ActionResult SignIn(LogonModel logonModel)
{
    string logonMessage;
    if(_authenticationService.Login(logonModel.UserName, logonModel.Password, 
        out logonMessage))
    {
        FormsAuthentication.SetAuthCookie(logonModel.UserName,true);

        return RedirectToAction("Index", "Home");
    }

    return View();
}

I see the cookie getting set in the browser however when I close the browser and come back to the site, it is not logging me in automatically. It is almost like the cookie is not being processed, which it should be.

Sergi Papaseit · Accepted Answer · 2011-04-18 13:46:33Z

4

The first and most obvious question is: are cookies enabled in your browser?

What you could check as well is, whether in your web.config, you have configured the <authentication> section to have a timeout:

<authentication mode="Forms">
    <forms loginUrl="~/login" timeout="60" />
</authentication>

if you don't specify a timeout it'll use the default value of 30 minutes, but maybe you set it to some other (invalid) value?

timeout attribute:

Specifies the time, in integer minutes, after which the cookie expires.

You could also check the CookiesSupported property (boolean) to see that that returns.

answered Apr 18, 2011 at 13:46

Sergi Papaseit

16.2k16 gold badges71 silver badges103 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Code Jammr Over a year ago

I am marking this as the answer due to the fact that it got me looking back at the web.config. I had a typo in the domain for the cookie. Now it appears to be working. I have not tested all browsers yet but it works in chrome. Thanks much... I love typos.

Code Jammr Over a year ago

Funny how I look back at these and realize how much better of a developer I am today... I would never ask something this retarded today :)

Sam Jones · Accepted Answer · 2016-02-24 01:33:55Z

3

Be sure to remove the following <modules> tag from the web.config if using MVC 5+

<system.webServer>
<modules>
  <remove name="FormsAuthentication" />
</modules>
</system.webServer>

answered Feb 24, 2016 at 1:33

Sam Jones

4,6683 gold badges43 silver badges50 bronze badges

Comments

Kristian Schneider · Accepted Answer · 2016-03-15 09:11:03Z

0

I had a situation where the domain was wrong in the authenticaion section:

  <authentication mode="Forms">
      <forms name="yourAuthCookie" loginUrl="/user/login" protection="All" path="/" enableCrossAppRedirects="true"  timeout="90" domain="WRONGDOMAIN.COM" />
    </authentication>

Removing the domain did the trick:

  <authentication mode="Forms">
      <forms name="yourAuthCookie" loginUrl="/user/login" protection="All" path="/" enableCrossAppRedirects="true"  timeout="90"  />
    </authentication>

answered Mar 15, 2016 at 9:11

Kristian Schneider

1751 silver badge7 bronze badges

Collectives™ on Stack Overflow

FormsAuthentication.SetAuthCookie problem

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related