1

How can I compute the value of the ASP.NET forms authentication cookie?

2

It completely depends on the settings you've chosen. The value of the forms authentication cookie is a FormsAuthenticationTicket. The ticket has a number of properties, and it is then:

  1. Serialized before further processing.
  2. At this point it can either be signed (using a message authentication code), or encrypted, or signed and encrypted, or neither.
  3. If it signed, it could be signed using one of a number of mechanisms as specified in the machine or application configuration.
  4. If it is encrypted, it will be encrypted using an algorithm and key specified in either the machine or application configuration.

So, you'll have to know which specific configuration you're targeting (and the specific keys, if applicable) in order turn the value of the forms authentication cookie into something usable.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.