ansaurus

Question

ASP.NET authentication cookie not deleting after Firefox is closed

Answer 1

A:

Just a wild guess: make sure you haven't got the FireFox Downloads window still open...

Wim Hollebrandse 2009-10-29 18:39:47

Answer 2

+2 A:

Are you closing the browser, or just the one tab? You need to close the whole browser. If you have multiple top-level browser windows open, all of them need to be closed. Also, any other windows that are part of the FireFox process need to be closed, too: Downloads, Live HTTP Headers, View Page Source, etc.

GBegen 2009-10-29 18:43:32

Answer 3

+2 A:

Instead of relying on Mozilla or any other browsers,I would recommend you to use this code to delete the cookies :

if (Request.Cookies["UserSettings"] != null)
{
    HttpCookie myCookie = new HttpCookie("UserSettings");
    myCookie.Expires = DateTime.Now.AddDays(-1d);
    Response.Cookies.Add(myCookie);
}

For more information regarding to this topic : How to: Delete a Cookie

Edit :

If you want to delete cookies during page unload, you can use Javascript to accomplish that :

<html>
<head>
  <title></title>
  <script type="text/javascript">
   function deleteCookie()
   {
     var d = new Date();
     document.cookie = "v0=1;expires=" + d.toGMTString() + ";" + ";";
     alert(document.cookie);
   }

  </script>
</head>

<body onunload="deleteCookie()">
...

</body>
</html>

I think in your situation Javascript is the best solution.

Braveyard 2009-10-29 18:51:38

And where do i put that code? Because i want to delete it when the user closes the window, and i dont find any handler for this.

Tom S. 2009-10-29 19:07:41

@Tom S. : According to your question, I've changed my answer. Hope it helps.

Braveyard 2009-10-29 19:21:01

Answer 4

A:

Thanks for the tips guys, but im sure im closing the browser, without any more Firefox related windows opened.

By reading this, it seems that this is the default browser behavior, choosed by the Firefox 3 designers...

Seems it stores on the disk cookies suposed to be stored on RAM, to recover the tabs when you open the browser again. So if you want to session to be deleted, you need to close all tabs, and then the browser...

I think this can cause some flaws regarding authentication security, for example, someone is using the application, finish the job and leaves, by closing the browser, and not the tabs. Since the computer is shared, right after another user opens the browser, and he will see all the tabs, with the previous session restored...

Tom S. 2009-10-29 18:59:59

Answer 5

A:

Don't use cookies, use session to store the authenticated user, and ASP.NET will manage the session cookie for you, it works with FireFox and is more secure.

But if you want to continue with this authentication cookie place the code to remove it in Global.asax Session_Start event.

protected void Session_Start(object sender, EventArgs e)
{
    HttpContext.Current.Request.Cookies.Remove(FormsAuthentication.FormsCookieName);
}

Wagner 2009-10-29 20:54:09

Great ideia, removing it when the session start!But why using session is better? And how do i store the authenticaded user in the session? Im using the authenticating system from ASP.NET, defining this tag in web.config: <authentication mode="Forms"> <forms loginUrl="Login.aspx" name=".ASPXFORMSAUTH"/> </authentication>

Tom S. 2009-10-29 23:08:18

This actually doesnt work, because the ASP.NET session doesnt end in Mozilla if you don't close the specific tab. If you close the window without closing the tab, the session is still activated.

Tom S. 2009-12-02 21:06:53

ansaurus

tags:

views:

answers:

ASP.NET authentication cookie not deleting after Firefox is closed

related questions