views:

16

answers:

1

I have an ASP.NET application which stores a "Remember Me" token as a cookie; it worked fine until I implemented SSL.

Using FireCookies, I never see my cookie (named "_rmtoken") though ".ASPXAUTH", "ASP.NET_SessionId" and other cookies do show up. Here is the code I use to set the cookie:


public static void SetRememberMeCookie(HttpContext context, Guid token)
{
    DeleteRememberMeCookie(context);
    var loginCookie = new HttpCookie("_rmtoken")
    {
        Value = token.ToString(),
        Expires = DateTime.Today.AddMonths(1), 
        HttpOnly=false, 
        Secure = false
    };
    context.Response.Cookies.Add(loginCookie);
}


+1  A: 

Change this line from false to true

Secure = false

Msdn Reference - HttpCookie.Secure property

heads5150
per the code, Secure is already set to false. It doesn't work.
Keith
sorry wasn't completely clear, change the line from Secure=false to Secure=true
heads5150