c# FormsAuthentication signOut another user

Question

Hi All,

I'm using formsAuthentication and as an admin user to the site i would like to be able to sign another user out. Is this possible ?

Answer 1

No it's not. You could probably write something that intercepts authentication, and if it detects a user in the list of users to be logged out does it, but even then what happens if a session times out due to inactivity? The user would never have hit that authentication event and would still be queued.

Answer 2

You could do the following:

1. Write a custom http module and in the AuthenticateRequest event check to see if a user is authenticated and get his username.
2. Look up in some common store (probably a database) for a list of users to be signed out.
3. If the user is in this list sign him out.
4. Remove the user from the list of users to be signed out.

And as an administrator you could update the list of users to be signed out.

Answer 3

Yes it is and you dont even need to write a HttpModule to do it: FormsAuthenticationModule.Authenticate. Simply have your event handler take a look at the incoming user and if its in some list of people to be signed out remove them from the list & sign them out.