如何自动登录用户

Question

here is what i am trying to do:

1. user logs in and check rember me.
2. user then closes the site.
3. next time the user visits the sites he is auto logged in withoutre-entring his user or password

thanks

using asp.net 3.5. using forms authentication

Answer 1

When you are calling FormsAuthentication.SetAuthCookie() , you can set the second parameter to true to make the cookie persist for a very long time.

Answer 2

Depending on your authentication model, I have a manual authentication process, by that i mean i Have a site whos entire authentication model has been coded from the ground up to suite the website.
No built in .net is used.

We hold an auto login feature in our cookie. The way this is done is by adding the login username and password to the cookie, but all key names and values in the cookie are encrypted with triple des encryption. So in the unlikely event the cookie is decrypted, they then face a triple des encryption to get the user credentials.

We have a handler that checks if the user is logged in on each request, various flags in the session are set to signify whats happening. eg you first land on the site, the handler checks for cookie support, if not provided a flag in the session signifies client doesnt support cookies and no further attempts are made. If it does support cookies the cookie is read, and if auto login is checked the credentials from the cookie are used to login.

It is easier to use the built in .net authentication model, but for ultimate control, DIY.