Auth cookie shared between web sites
I have two web sites in two different regions running the same app with a DNS Failover that switch to region 2 if region 1 is down.
Is it possible to keep users logged in when they logged in in region 1 and then are redirected to region 2?
https://msdn.microsoft.com/en-us/library/eb0zx8fc.aspx
To configure forms authentication across applications, you set attributes of the
forms and
machineKey sections of the Web.config file to the same values for all applications that are participating in shared forms authentication.
The following example shows the
Authentication section of a Web.config file. Unless otherwise noted, the
name, protection, path,
validationKey, validation,
decryptionKey, and decryption attributes must be identical across all applications. Similarly, the encryption and validation key values and the encryption scheme and validation scheme used for authentication tickets
(cookie data) must be the same. If the settings do not match, authentication tickets cannot be shared. For information about how to generate values for the
validationKey and decryptionKey attributes, see
How To: Configure MachineKey in ASP.NET 2.0. (This topic applies to ASP.NET version 2.0 and to later versions.)
Frank
Similar Messages
-
Why I can't get the cookie from this web site when I can get it from google
public static void main(String[] args) throws Exception {
// I can get the cookie from "http://www.baidu.com"
// String domain1 = "http://www.baidu.com/";
// String domain2 = "www.baidu.com";
// I can get the cookie from "http://www.google.com"
// String domain1 = "http://www.google.com/";
// String domain2 = "www.google.com";
// I can not get the cookie from "http://www.csdn.net"
String domain1 = "http://www.csdn.net/";
String domain2 = "www.csdn.net";
URL url = new URL(domain1);
HttpURLConnection httpConn = (HttpURLConnection) url.openConnection();
httpConn.setRequestProperty("User-Agent", "Internet Explorer");
httpConn.setRequestProperty("Host", domain2);
httpConn.connect();
String cookie = httpConn.getHeaderField("Set-Cookie");
System.out.println(cookie);
My question is: How can I get the cookie from the web site:http://www.csdn.net?I found it in my computer , the location is: C:\Documents and Settings\zhijun\Cookies\zhijun@csdn[2].txt
and there are many characters, they are:
__utma
17226283.1339458738.1221633513.1223535733.1223539291.58
csdn.net/
1600
786595712
30107528
1029600608
29960677
__utmz
17226283.1223539291.58.57.utmccn=(organic)|utmcsr=baidu|utmctr=VB.NET%B2%BB%C4%DC+%B6%CF%B5%E3|utmcmd=organic
csdn.net/
1600
4189609856
29997389
1029910608
29960677
LastVisitedForum
b7e466c6-291a-4072-acee-15d2be78c647*b5f1380c-f04c-4682-861a-54357b14186a*0a4a010e-8694-4139-b91f-a4ee1374981b*caa7532e-956b-4661-a53f-d46e3f1a8187*8b327318-2c42-4a49-8aed-ef8c33697e7f
csdn.net/
1536
2105548800
29964700
960690608
29960677
userid
2018946
csdn.net/
1536
1900813440
29963485
771368976
29960669
__utmb
17226283
csdn.net/
1600
1849111424
29960681
1029760608
29960677
ABCDEF
X1rZPCiZupWekhlTu78xWhr2Oj5GmFwk0J%252b8COfIv7IvVh2PgEPu2V7ooeZuUnene2j%252fDKJsNnZWYBSQxVkTfunvGq%252fDYuzFALM0ugLUmppZAHgfUWgQ%252bziPRLLJyFdzUpHwfG%252fReU8SfFy588HH02NPWPsO8RjgtHym%252bcJdUOnIH5J%252bkPEj%252b%252bZwlSPb5u0M0mPQRU1gOScfY4b981MifF4ksep8sZp1Ro2ofGHIg6l%252bgJ0P0XFASz2cJU8Objo%252f
csdn.net/
1536
1900813440
29963485
770898976
29960669
QWERTOP
6695
csdn.net/
1536
1900813440
29963485
771058976
29960669
activeUserName
boxiuzhen
csdn.net/
1536
1900813440
29963485
771058976
29960669
UserName
boxiuzhen
csdn.net/
1536
1900813440
29963485
771058976
29960669
PName
542a00960558bf1690fe08696d1245f407130025d59bd14ad6430f
csdn.net/
1536
1900813440
29963485
771368976
29960669
Is this prove that the csdn web site which I can not get the cookie is not using url-rewriting? -
How can I copy cookies about some web site and paste them into a program's header?
You may know the programme called Teleport Ultra which allows us to download an entire web site and browse offline. There is a forum I want to download but it doesn't allow to see the pages without logging in. So I want to take the cookies after I log in to site, and put them to the programme. How can I do?
PS: I have to re-create it like "cookie: name1=value1 name2=value2;" in the program*Cookie Exporter: https://addons.mozilla.org/firefox/addon/cookie-exporter/
-
Accept cookies from my web sites list only
Hi,
yet on Safari 4.0.4 I don't see an option which indeed should be very useful: "Accept coockies from my web sites custom list only". With this option I could quickly compile a list with the web sites I like to leave my info and exclude all the rest. For example, I should put on this list only web sites like facebook.com, discussion.apple.com, twitter.com because they need to store my username and password to automatically log in on the next times. I will exclude all the other web sites, which usually gather informations I don't like to share with.
It's an option about the privacy. So I presume it should be welcome by the whole Mac community.No, Safari does not offer that, but there is an alternative that might also work for you:
I have Cookie Preferences set to 'Accept cookies only for sites I visit', but I only wish to retain cookies for the sites i regularly visit, like these forums and others.
To that end I use a small app called SafariCookies:
http://sweetpproductions.com/safaricookies/
which only works on Leopard and Snow Leopard. This adds an item in Safari Preferences whereby you can automatically delete all cookies on shutdown, except those particular 'favourite' ones you wish to retain to avoid entering your user name and password each time you visit. -
How do I enable cookies for certain web sites?
How do I enable cookies for certain sites?
Hi mmerritt,
You should take a look at the Knowledge Base article [[Enabling and disabling cookies]]. It will show you how to set an exception so that you can enable cookies for a particular site.
Hopefully this helps! -
I have recently (6 months ago) purchased and use an HP Pavilion desktop with Windows 7. At times, when especially active (several windows open) and switching between windows or using links to connect with another web page, all the images on the home home page "disappear", that is to say there is space, but no image, as if the page did not load correctly. When this happens, pages other than the home page also do not display images.
Same pages display correctly in Explorer whenever this happens.Hi
Can you please try setting up full persmission in the security properties for everyone on the wsconfig folder C:\ColdFusion10\config\wsconfig and restart ColdFusion Server.
Swaraj -
IE fails to store cookies for some web sites
Hi,
I am working on a PHP based website. The problem is IE is not storing the cookies for this site. I have cross checked this that the cookies are being saved in the system for other sites: I was able to login to Yahoo, Gmail and so on..... only my site is
not working. I tried Mozilla Firefox and Chrome and both are working without any issues.
Usually cookies will be stored to "C:\Users\user-name\AppData\Roaming\Microsoft\Windows\Cookies" and I can see cookies for other websites in this directory but not mine.
This is my url: http://md1svcvlnx24/wmsdev/
Is there anything wrong in domain name? but I think a domain name can contain numbers.
Thanks,
NagarajHi Kelvin,
Thanks for the reply. You cannot access http://md1svcvlnx24/wmsdev/ on internet, its a local environment. Our customers
have just given alias for localhost I think. We can access this instance using our local network and when I try to login to the site, I noticed the cookies not been saving to the system and this happening only for this site, rest OK.
My doubt is: What is the use of giving domain name when calling setCookie() in PHP?
Is it necessary to set domain name when calling this function? We are assigning NULL ("") value to this option when calling setCookie() funcxtion
At present we are calling setCookie() function like below,
setcookie(name, value, expire, '/', ""); Please note that we are assigning null value to domain name (last option). So do we need to assign domain name here? If so how in this case (http://md1svcvlnx24/wmsdev/)?
I really appreciate your suggestion.
Thanks,
Nagaraj -
How to disable referrer between web sites but still enable them inside web sites?
I don't want websites to track where I come from. But I guess nowadays for them to work properly I still need referrer to be enabled inside the same site. Best and easiest way to accomplish all that?
Try this extension:
*RefControl: https://addons.mozilla.org/firefox/addon/refcontrol/ -
What's the difference between a web site and a web application?
I'm stumped trying to come up to a difference between a web site and a web application for myself. As I see it, a web site points to a specific page and a web application is more of some sort of 'portal' to content and information.
But where I'm stuck is that a web application is still viewed through a browser (is it not?) and a web site can still view content dynamically, making the line between web site and application prety gray.
For instance, does a web site using ASP.NET or AJAX (I assume ASP.NET is AJAX's proprietary sibling, if not, ignore ASP.NET AND concentrate on the AJAX), becomes a web application because it can retrieve data dynamically and asynchronously or would a website
using PHP and a CMS be more of a web application because it forms the pages on request, based on the request of the client and its content in its databse?
Or maybe I'm totally wrong here - what differenciates between a web application and a website?
http://support.peopleperhour.com/entries/68630566--C-mon-lets-Watch-The-Other-Woman-2014-full-movie-online-free
https://glossicom.zendesk.com/entries/68643806--%D0%BC-v%C9%AA%C9%9Bc-%C3%A4st-Watch-The-Lucy-2014-full-movie-free
https://cloudhance.zendesk.com/entries/68115098--%D0%BC-v%C9%AA%C9%9Bc-%C3%A4st-Watch-The-Lucy-2014-full-movie-free
This is totally personal and subjective, but I'd say that a website is defined by its content, while a webapplication is
defined by its interaction with the user. That is, a website can plausibly consist of a static content repository that's dealt out to all visitors, while a web application depends on interaction and requires programmatic user input and data processing.
For example, a news site would be a "website", but a spreadsheet or a collaborative calendar would be web "applications". The news site shows essentially the same information to all visitors, while the calendar processes individual data.
Practically, most websites with quickly changing content will also rely on a sophisticated programmatic (and/or database) backend, but at least in principle they're only defined by their output. The web application on the other hand is essentially a program that
runs remotely, and it depends fundamentally on a processing and a data storage backend.
http://support.peopleperhour.com/entries/68125597--%D0%BC-v%C9%AA%C9%9Bc-%C3%A4st-Watch-The-Lucy-2014-full-movie-free
https://cloudhance.zendesk.com/entries/67541393--Watch-The-Godzilla-2014-free-Online-Full-Movie-HD-Quality
http://support.peopleperhour.com/entries/68168787--Watch-The-Godzilla-2014-free-Online-Full-Movie-HD-Quality
https://glossicom.zendesk.com/entries/68161538--Watch-The-Godzilla-2014-free-Online-Full-Movie-HD-Quality
There is no real "difference". Web site is a more anachronistic term that exists from the early days of
the internet where the notion of a dynamic application that can respond to user input was much more limited and much less common. Commercial websites started out largely as interactive brochures (with the notable exception of hotel/airline reservation sites).
Over time their functionality (and the supporting technologies) became more and more responsive and the line between an application that you install on your computer and one that exists in the cloud became more and more blurred.
If you're just looking to express yourself clearly when speaking about what you're building, I would continue to describe something that is an interactive brochure or business card as a "web site" and something that actually *does something that feels
more like an application as a web app.
The most basic distinction would be if a website has a supporting database that stores user data and modifies what the user sees based on some user specified criteria, then it's probably an app of some sort (although I would be reluctant to describe Amazon.com
as a web app, even though it has a lot of very user-specific functionality). If, on the other hand, it is mostly static .html files that link to one another, I would call that a web site.
Most often, these days, a web app will have a large portion of its functionality written in something that runs on the client (doing much of the processing in either javascript or actionscript, depending on how its implemented) and reaches back through some
http process to the server for supporting data. The user doesn't move from page to page as much and experiences whatever they're going to experience on a single "page" that creates the app experience for them....can i make as many iweb websites as i want? ...and as many blogs as i want? ...i have never made one before....
....although, i do have my own small business and i do have a website that i paid a guy to make and also host....(which is a waste of $$$$ in my opinion as i think i can do a better job making one myself through iweb) ....
...anyways, i know it is splitting hairs but what exactly is the diff b/w a blog and a website ....i am under the impression that a blog is just a personal newsletter sort of thing,...? -
Hello,
I'd like to know your opinions about how many resource bundles should I use on a big web site. Should I use on per page, one per section, or one per site?
What do you suggest?
My current approach is one per page, but there are lots of repeated strings, so I think one per site or per section is better.
What's the performance impact of this decision?
Do I have to make some kind of cache for the resource bundles?
Thanks!While I haven't done JSP, I have done both Java and web development.
I'd have to say a bundle per section would probably be best. I've found that in normal Java development, it's pretty much standard to have one per package, as strings tend not to repeat between packages too frequently. I think it'd be safe to say that they won't much between web site sections either.
Hope that helps!
Martin Hughes -
Intention of JSF (web applications or web sites?)
Hi,
I want to write a web application that has a similar look and feel to todays desktop applications. Thus I don't need a typical web site look (title on the top, navigation bar etc.) but a more desktop look (a menu bar on the top, a status bar on the bottom etc.)
Although I like JSF I am not sure, if this framework is the best for this job. Thus I wanted to ask, if you can tell me the intention of JSF:
Is it to build web sites or is it also to build web applications without the typical web site look and feel? With JSF both is possible of course. And with the adequat JavaScript library on the client side it looks very nice (e.g. ExtJS).
But was this one of the intentions of JSF? Or was it primarily to build usual web sites with a page flow etc.? And maybe another framework is better for what I am going to do?
I only don't want to use a JSF for something it has not been made for.
Greetings
Mikewpafbuser1 wrote:
I don't see what the point is in making a distinction between web sites and web apps. Are you trying highlight the difference between say Apache vs. JBoss?I'm not sure what you mean by "the difference between say Apache vs. JBoss" but here's what I meant. When I think a web site, I think of a site where the interaction tends to be more reading, clicking from page to the next, etc., like, for example a news site. With a web app, I tend to think of statefulness, business processes, etc, like an online accounting system, content management system, etc. The distinction is probably pretty academic, though...
Well you need to decide if you're making a simple web site that serves static content or i fyou're making an application with a GUI. There's a big difference.Exactly.
For a desktop-like application, I say web browsers in general are a bad choice. I'd use Web Start if possible and write a GUI. In any case, Hehe. That's a completely different (though very valid argument(
AJAX is the last thing I'd use (now you're writing HTML, XML, AJAX, Java, etc..). Echo2 provides 1 single API rather than hacking several. Flex, while I haven't used much, seems to also provide a much cleaner solution. Fair enough, and that's not an uncommon opinion. I'm probably somewhere in the middle, but, for what I've been asked to do since the web 2.0 hype started, Ajax has been sufficient. I'm not Echo2 expert, but isn't that just an HTML/JS interface with a Java backend with Ajaxy operations? For really, really complex and dynamic UIs Flex (or JavaFX :) might be more appropriate.
Again, I haven't used JSF so I can't say much about it. But I see lots of projects all the time and JSF seems to be slow for adoption so far. Just my personal experience.Hmm. I've used it for about three years now, fwiw, and really, really like it. Which probably isn't worth much. I will admit, though, that JSF isn't always the right tool (thus the discussion here). As far as adoption goes, it seems to be growing much faster than the other frameworks out there, but I may have tinted glasses... ;) -
Using a cookie from one application web site to another application
Hi,
I have a big application written in ASP/CF. In this
application, I added a link to my small application in CF. Both
apps are on the same server but separate websites. I liked to use
the user admin functionality that is available in the big
application into my small apps. What I need is the cookie userid
from the big application so that I can use it. How do I go about
that? Can you please provide a sample code?
Thanks in advance.meeyaw wrote:
> Hi,
>
> I have a big application written in ASP/CF. In this
application, I added a
> link to my small application in CF. Both apps are on the
same server but
> separate websites. I liked to use the user admin
functionality that is
> available in the big application into my small apps.
What I need is the cookie
> userid from the big application so that I can use it.
How do I go about that?
> Can you please provide a sample code?
>
> Thanks in advance.
>
Cookies, by definition, are web site specific. You can set
them to be
shared across sub-domains, but you can not have one domain
read another
domains cookies. To do what you want one of the applications
will have
to pass the desired value to the other in some manner of your
choosing. -
Shared attribute in *-web-site.xml
What exactly does setting the shared attribute of a web-application in *-web-site.xml to "true" accomplish as far as sessions are concerned?
Even if the session object data may not be shared, should I not get the same session id for two web-applications that have shared="true" set for them in the *-web-site.xml file?
Also, why is the string returned from HttpServletRequest.getRequestedSessionId()
so much longer than that returned from HttpSession.getId() in iAS 9.0.3? Shouldn't they be the same if the session is active? In 9.0.3 standalone OC4J, the two method calls return the same string when the session is active. Why is there a difference between iAS 9.0.3 and standalone OC4J 9.0.3?Sumit -
The shared attribute is something that was inherited from the Orion codebase when OC4J was originally created.
There is a description of the shared attribute on the Orion documentation site.
http://www.orionserver.com/docs/web-site.xml.html
I don't know how this behavior functions on OC4J today since we have done a lot of work to implement an AJP protocol listener within OC4J to allow it to sit nicely behind Apache, and we've implemented some new security managers to support JAAS.
-steve- -
Using Mac OSX 10.7.1: recently replaced our DSL modum and wireless router, suddenly I can't get some web sites to load. Many do, but Twitter and others often do not. I've reset the browsing history, forms, cookies and cache but it continues to happen.
Ok, first thing, why are you doing anything with WAMP or XAMPP when you're running a Mac? MAMP should be what you want unless you're not explaining part of what you are trying to do.
2nd thing, I haven't used MAMP in a while, but there are two possibilities for not seeing what you want to see once you have MAMP turned on. One possibility is that you already have "Web Sharing" turned on in your Sharing Preference Pane. If that is the case, port 80 will already be taken and you'll be seeing the default Apache install (files are stored at /Library/WebServer/Documents/). This would push MAMP to either not turn on it's web serving capabilities, or to push it to another port. The other possibility is that MAMP defaults to another port anyway. So instead of localhost, you might have to type in localhost:8080 or something similar. I believe the control panel that gets installed can take you to the currently MAMP-served page, and it can also help you change which port your serving on.
80 is the default port for web serving and the ONLY port that will let you get straight to the server without having to type in webaddress.com:port# instead of just webaddress.com. -
Sharing sessions between web applications (WAR files)
I am using weblogic 6.1. The opinion I have read indicates that
sessions cannot be shared between WAR files. That is, I cannot put an
attribute on the session from a servlet/JSP in one WAR file and read
it out from the other. The only justification I've seen is "security".
Now, I find this rather difficult to accept for several reasons:
1. I cannot fathom what kind of "security" would prevent me from
sharing the session between two web applications that I wrote myself.
Let's say I want to write a system that I divide up, for
modularity/separate deployment purposes, into 5 different WAR files.
Why should I not be able to just sign on once and pass that logon
information in the session from one to the other? (I know, I can use
cookies or URL rewriting - but that doesn't seem to be to be a good
solution. And if you can share information through cookies, why not
through sessions?) What about other user information like currently
selected language?
2. Several app servers (iPlanet and I have heard two others) allow you
to share sessions between WARs. Why not weblogic?
Thanks for any information you can give me. I have not been able to
find anything in weblogic documentation about this. If I am
misunderstanding the server capabilities, please enlighten me.
Thanks,
<>< gary
http://www.weblogic.com/docs51/classdocs/webappguide.html
--kumar allamraju
Grant Lewis wrote:
> I'm currently evaluating weblogic and I can't find any references in
> their documentation set stating they support web applications or war
> files. They explicitly state in their docs the Servlet 2.2 specification
> has been supported since version 4.5. I'm evaluating version 5.1. Can
> anybody clear up the confusion for me.
>
> Grant
Maybe you are looking for
-
DPS Feedback From Client: A Book Publisher's Perspective
Greetings, I thought it might be helpful to both Adobe and other publishers to post some real-world feedback from one of our clients. But first, some background: We are a book publisher moving into the realm of book apps. Our book apps or not at all
-
Mouse pointer is flickring when i am using FIREFOX 4 why ?????
me mouse pointer keeps on FLICKRING when i use FIREFOX 4. it doesn't flickr when i use google chrome or IE. why is it so????? its really annoying me plzzz tell what to do.????? i closed firefox many times but still the same problem.
-
HT2905 How do I find and delete Duplicate songs in iTunes v11.0 (163)
The steps for previous versions seem to no longer apply to the latest iTunes v11.0 (163). Any suggestions on how to find and delete MANY duplicated songs using the recently updated iTunes (Friday Nov 30th 2012) Thank you for your time.
-
Unencrypting a disk after crash
My main boot drive is encrypted. I back the drive up nightly to another internal drive. Yesterday morning, my main drive suffered a corruption to the master boot record and could not be repaired in software. As a result, I booted from the backup d
-
Why V1 (input tax) apply to PO but not A1
Hi friends, I am creating PO under a UK company code. to my understanding, I should input A1(output tax code) since this is liability. However, system forced me to input V1(input tax). Why? while I realized A1 has been applied to customer invoice. is