Security :: FormsAuth Ticket Not Available In Modal Dialog?
Dec 2, 2010
I have a web app that uses window.openModalDialog to display a page. This page has a hyperlink that connects to an HttpHandler to retrieve a file. The link has a target property of "_blank". We've recently implemented Forms Authentication on this site in place of a flaky proprietary solution and we are noticing that now whenever we click on that link we get a pop-up window and the login screen appears.In the authorization section of the web.config we're saying that we don't want to allow anonymous. However, if I add a location element with the URL the handler is associated with, I can hit the breakpoint in the ProcessRequest method because it doesn't care if I'm not logged in. What's odd is that I should be logged in so it seems that the authentication ticket (which isn't expired yet) isn't being accepted in the popup window. If I allow anonymous I can bypass this problem, however the code that retieves the file relies on Session data and it's null. Therefore, either way I can't get this to work.It has been suggested that instead of a modal dialog just use window.open, however I'm reluctant to do that because when this window is open I don't want users accessing the parent window due to several reasons. Is there any way to get around this problem? I don't want to ditch forms auth for the old way because it wasn't secure.
I am using MVC2 on VS2010 Express edition. I followed a post by Dino Esposito on UI with JQuery passing data to a dialog from strongly typed views. I can't make the dialog work with modal:true option.Here I have a simple page that includes RenderPartial for a dialog. The dialog is supposed to pop up when a button is clicked. However, if I include modal:true as one of the dialog options, then when the button is clicked nothing happens. The dialog does not pop up. When I remove modal:true from the dialog options then dialog pops up as expected and closed as expected.
I am developing a asp.net application using SQLServer 2008 and I have a page "Default.aspx" in which i have userID and Password textboxes and a SUBMIT button. Here is the script I am using to authenticate.
[Code]....
Well now i want to know that by using FormAuthenticationTicket how can I check on other pages if user is authenticated user cause in the URL if i just change the page like "Main.aspx" and hit it takes me there which should not happen and redirected to Login page.
How should i check on every page on page load event if user is authenticated or not and if not then redirected to Login.aspx.
I have a asp.net application where i am using FormAuthentication Ticket when user Sign in....on each page I want to check if FormAuthentication Ticket has expired ...how to do this ?..
I create an authentication cookie (ticket) with an expiration date of one day.The cookie'sIsPersistent is set to true.
I do not use any session variables.
Session timeout is the default 20 minutes.
Here's the problem:
When the session times out in 20 minutes, the user is redirected to the logon page even though the authentication cookie has not expired.
Why does this happen? I thought the cookie and the session worked independently. Shouldn't the user remain logged in as long as the cookie hasn't expired?
i have a secure ASP.net application ,login page and all these stuffs, i want to create a windows desktop application for some resones but i want to use the same security of the asp.net , is there anyway to get the login information of the asp.net to login to my windows desktop application?
Let's say I'm currently authenticated in an application (namely: applicationA) and I click a link that will take me to another application (namely: applicationB). Is it correct that in order to bypass authentication of applicationB, I'll just create a ticket for that application telling the web server that I'm already authenticated?
i have a custom class has extra information about my users , i want to create an object of this class and attach it to current Authentication ticket , what is the best way to do that , i have read there is a userdata thing in the authentication ticket but it's type is String
Currently I have a project where I have a form in ASP.NET that needs a look up service. For example the input below wants a Customer ID, but maybe the user only knows the customers by name.
I'd like to use jQuery UI's modal dialog to append an image to the right of this input, which fires dialog("open") containing the necessary code to look up a customer by name, returning the ID back to the form input upon closing the dialog. This is extremely similar functionality to the Datepicker's icon trigger found here: http://jqueryui.com/demos/datepicker/#icon-trigger .Right now, I have this javascript:
I need to be able to pass the ID of the input element into jQuery, probably using the $(this) selector somehow. I'd like to be able to re-use the same code for multiple elements on the same form that require the customer ID look up. I also don't know how to create this kind of functionality inside the ASP.NET environment because it doesn't fundamentally allow more than one form inside one .aspx page.
What is the easiest way to show logins in a modal dialog? I'd prefer using JQuery but whatever will show up the login page (in a partial?) whenever i decorate a method with [Authorize] would be great.
Ive been searching for the past couple hours and i cant find anything useable.
I have a application that contains a gridview. When a user selects one of the items from the gridview, I want to be able to show a jQuery dialog box that contains a form with some pre-filled information from the selected item from the gridview. Right now I have a div with some html text boxes that is set to be a modal dialog box. The user clicks on it, and the selected item's ID is easily to retrieve. The problem comes when I want to go out to the database, get some of the details, then pre-fill in some of the textboxes and other elements before displaying the dialog box to the user.
An easy comparison is having a user click on an item so that they can submit a form to be processed with some of the items from the selection already filled in. I was wondering what the easiest way to go about this is. Right now I have it so that selecting an item from the gridview uses jQuery to do a Ajax post with the ID to a [WebMethod] in the code behind where it can then go off the database and get all the details of the record. The problem is that for obvious reasons the WebMethod can't magically fill in the fields of the form. I could send back all of the information to the ajax query to fill in, but that also feels pretty messy because there is no real strong connection from the random data I send back and which field they belong to.
A lot of this is pondering out loud, but I am really interested in better understanding how to use jQuery and Ajax within ASP.NET.
I am using jquery to display modal dialogs thought my app as certain events happen. I have created a seperate partial view that contains the html but i was wondering where best to handle the stylesheet and css registration. One option would be to always have these two resources linked in the head section of the master page, but is the wasteful since it is only needed when a modal is displayed? Or should I put them in the partial view, but if I did this, they would not be added to the head section.
I've put an asp.net button on a modal dialog box that will appear once a certain option is clicked.
I want to call a .net subroutine once the button is clicked as normal but because I'm guessing it's in modal in won't foolw through to the subroutine or the click has no affect.
I'm having a problem trying to delete the form authentication ticket (.ASPXAUTH) from the server side. It would be the same to delete or invalidate the ticket so the client could not reuse it.
So far, the only solution I've found is to delete the ticket from the client side (through a "Set-Cookie: .ASPXAUTH=;") but nothing seems to be implemented and/or working for doing so in the server side. The final idea is that if someone steels that ticket
In particular, I'm working in C# but as it's rellated to the Dotnet Framework any implementation of the solution would be OK; I tried all the possible things and nothing worked out, even invalidating the session but nothing.
I have a button Import on my page. Upon pressing this button, a modal popup dialog appears where the user can enter path of the import file. I have a required field validator to make sure the user entered the path. And I have there a Submit button. My problem is that validation happens not only when I press the Submit button on the modal popup, but also when I press any button on the page itself, which is wrong.
I am using jQuery dialog in asp.net. It is working fine for me. The problem is when I open the dialog box, I can still work parent page functionality. I don't want that. Just dialog to modal and should not allow focus on parent page.
this is the first time i'm using jQuery dialogs so this question might be somewhat simple but i haven't found answers on this yet.
I'm using ASP.Net Ajax to perform an asynchronous postback when user enters something into a Textbox(actually scanning a barcode). This is working like a charm.Now i need to let the user decide between two options under certain conditions. Therefore i need the postback to decide if this dialog must be shown and what content it has.
Q: How to open a jQuery UI (modal) dialog from serverside, let the user choose an option, postback again to server and handle this decision.
I think i need AjaxControlToolkit.ToolkitScriptManager.RegisterClientScriptBlock to register the script that opens the dialog, am i right? If yes, what script opens the dialog onload?
Can i then postback to server by setting AutoPostback=true on the control(f.e. RadioButtons or a DropDownList)inside the dialog and handling the appropriate events?
What is the best/easiest way to accomplish what i'm trying?
Edit: I considered to encapsulate the dialog into an ASP.Net UserControl and show/hide it. Is this approach recommendable or will it conflict with jQuery in any way?
I want to know, if its possible to pass collection between pages. I mean to say i have a client-side JavaScript modal dialog on which I want to use my collection. Earlier I was using Session[] to share the value, but its becoming evil for me, as it always displays the first value. Any change in value in not updated.
So whenever my pop up is displayed I want the collection to get moved to the Child dialog. From there, i will extract the Collection, do some stuffs and again return it to parent page, preventing postbacks and session management.
what i want to do is that , i have html.actionlink and i want when the user click show a ajax modal dialog to it and get the data.
for example in my view INVOICES i have <%html.actionlink("Select Customers","actionresult","controller")%> and i want when user click the link , show the modal dialog who contain the list of customers. after the user click one customers come back to my INVOICES view with the ID of selected customers.
I have a parent window from which i open a modal dialog on button click. In WinXP with IE8 it works just fine, but in Win7 with IE8, upon opening the modal dialog it brings me to the login screen. If i enter my credentials, close the dialog and open it again, it works.The explanation i figured out is that the session isn't transfered between parent and child.The modal is opened with javascript window.open function.I don't want to store the credentials in a cookie and then read it in my modal because it's a security no-no. Is there an explanation why this is happening in Win7 and not in XP and is there a resolution for this issue?
I have a bootstrap modal pop up that contains Last Name, First Name and Middle Name. And it is inside the update panel alse the button submit. The button submit is triggered as Asynchronous Postback. But when I click the submit button the background of modal pop up is still there.
Is there a straightforward way to use server-side validation with ASP.NET's validation controls in a form that's displayed in a modal dialog? I am using jQuery and SimpleModal (in C#, VS2010, .NET 4.0)I've got a modal form which works fine. I need to use a server-side validation because the logic depends on data specific to the record being accessedMy solution for the project I'm working on now is to use a jQuery ajax call to pass all the form data to the server and get back the validation results before allowing the post to proceed. But this is relatively time consuming to implement, and in some situations I'm dealing with now all the validation code exists already.
The first challenge is that of course the modal dialog will close on a full postback. So you could put an UpdatePanel inside the dialog... without even thinking about this too much, though, I assumed that it wouldn't work out that well. It doesn't. And the form which opens the modal dialog to begin with is already in an UpdatePanel, which further confuses matters.Anyway, I tried putting the contents of the modal form in an UpdatePanel for the heck of it. It does actually do a partial postback, the dialog remains open, but the contents of the dialog do not get updated with anything I change server side. If I close and re-open the dialog on the same page after testing the validation code, though, its contents are in fact updated to reflect these changes. Obviously the way the dialog is rendered is confusing ASP.NET. Or vice-versa. But this just seems sketchy from the get-go.
Rather than trying to hack my way through this problem I was hoping that others had some suggestions about a better way to approach this. Or just tell me I'm trying to hard too mix apples and oranges and I should keep it all client side (or client side + jQuery ajax) if that is the only sensible thing to do.
