1

How can I compute the value of the ASP.NET forms authentication cookie?

Improve this question

1 Answer 1

Reset to default
2

It completely depends on the settings you've chosen. The value of the forms authentication cookie is a FormsAuthenticationTicket. The ticket has a number of properties, and it is then:

  1. Serialized before further processing.
  2. At this point it can either be signed (using a message authentication code), or encrypted, or signed and encrypted, or neither.
  3. If it signed, it could be signed using one of a number of mechanisms as specified in the machine or application configuration.
  4. If it is encrypted, it will be encrypted using an algorithm and key specified in either the machine or application configuration.

So, you'll have to know which specific configuration you're targeting (and the specific keys, if applicable) in order turn the value of the forms authentication cookie into something usable.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .