How to "Un-authenticate" a user from a Basic Authenticated, sessionless site

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • mike

    How to "Un-authenticate" a user from a Basic Authenticated, sessionless site

    Hello.

    I have a web site that is using Basic Authentication (yes, I am using HTTPS)
    and is sessionless (I am maintaining session state in a database via a
    custom component).

    When the user clicks "Log Off", or when a cookie expires, I want to
    Un-Authenticate the user so that he/she cannot back-pedal to a page without
    having to sign in again.

    Basically, I want to clear the users credentials.

    Anyone know how?

    Thanks in advance,

    Mike



  • Curt_C [MVP]

    #2
    RE: How to "Un-authenticate&qu ot; a user from a Basic Authenticated, sessio

    Session.Abandon
    Session.End

    --
    Curt Christianson
    site: http://www.darkfalz.com
    blog: http://blog.darkfalz.com



    "mike" wrote:
    [color=blue]
    > Hello.
    >
    > I have a web site that is using Basic Authentication (yes, I am using HTTPS)
    > and is sessionless (I am maintaining session state in a database via a
    > custom component).
    >
    > When the user clicks "Log Off", or when a cookie expires, I want to
    > Un-Authenticate the user so that he/she cannot back-pedal to a page without
    > having to sign in again.
    >
    > Basically, I want to clear the users credentials.
    >
    > Anyone know how?
    >
    > Thanks in advance,
    >
    > Mike
    >
    >
    >
    >[/color]

    Comment

    • mike

      #3
      Re: How to "Un-authenticate&qu ot; a user from a Basic Authenticated, sessio

      Hi, Curt.

      The site is sessionless, so there is no Session object.

      "Curt_C [MVP]" <software_at_da rkfalz.com> wrote in message
      news:FC37174D-B673-45AF-A054-82CA45F5DD0D@mi crosoft.com...[color=blue]
      > Session.Abandon
      > Session.End
      >
      > --
      > Curt Christianson
      > site: http://www.darkfalz.com
      > blog: http://blog.darkfalz.com
      >
      >
      >
      > "mike" wrote:
      >[color=green]
      >> Hello.
      >>
      >> I have a web site that is using Basic Authentication (yes, I am using
      >> HTTPS)
      >> and is sessionless (I am maintaining session state in a database via a
      >> custom component).
      >>
      >> When the user clicks "Log Off", or when a cookie expires, I want to
      >> Un-Authenticate the user so that he/she cannot back-pedal to a page
      >> without
      >> having to sign in again.
      >>
      >> Basically, I want to clear the users credentials.
      >>
      >> Anyone know how?
      >>
      >> Thanks in advance,
      >>
      >> Mike
      >>
      >>
      >>
      >>[/color][/color]


      Comment

      • Curt_C [MVP]

        #4
        Re: How to &quot;Un-authenticate&qu ot; a user from a Basic Authenticated, se

        My bad... thought you were storing the credentials there.
        Basically, if they authenticate the security ticket is issued. Short of
        closing the browser there isn't a whole lot (that I'm aware of) that you can
        do to clear this.
        It's why you always see the nice warnings about making sure you close your
        browser.

        --
        Curt Christianson
        site: http://www.darkfalz.com
        blog: http://blog.darkfalz.com



        "mike" wrote:
        [color=blue]
        > Hi, Curt.
        >
        > The site is sessionless, so there is no Session object.
        >
        > "Curt_C [MVP]" <software_at_da rkfalz.com> wrote in message
        > news:FC37174D-B673-45AF-A054-82CA45F5DD0D@mi crosoft.com...[color=green]
        > > Session.Abandon
        > > Session.End
        > >
        > > --
        > > Curt Christianson
        > > site: http://www.darkfalz.com
        > > blog: http://blog.darkfalz.com
        > >
        > >
        > >
        > > "mike" wrote:
        > >[color=darkred]
        > >> Hello.
        > >>
        > >> I have a web site that is using Basic Authentication (yes, I am using
        > >> HTTPS)
        > >> and is sessionless (I am maintaining session state in a database via a
        > >> custom component).
        > >>
        > >> When the user clicks "Log Off", or when a cookie expires, I want to
        > >> Un-Authenticate the user so that he/she cannot back-pedal to a page
        > >> without
        > >> having to sign in again.
        > >>
        > >> Basically, I want to clear the users credentials.
        > >>
        > >> Anyone know how?
        > >>
        > >> Thanks in advance,
        > >>
        > >> Mike
        > >>
        > >>
        > >>
        > >>[/color][/color]
        >
        >
        >[/color]

        Comment

        Working...