Services
Technology Web App Development Mobile App Development Windows App Development Database Development UI/UX Development Cloud Development SEO Digital Marketing Guest Posting Content Writing Artificial Intelligence Data Science ERP Development CRM Development CMS Development LMS Development Business Listing Blockchain Technology Startup Promotion AI Tools Integration
Products
Data Converter Cleaner TUC - Unit Converter Import Export Survey Manager Tweet Controller
Developer
Article Blog Forum Interview Beginner News Startup Quiz
Users
Career
Apply Job Internship
Pricing
Login Sign Up Get a Quote

interview

Home Interviews How can you create and manually set a custom Forms Authentication ticket? – MindStick
Ask Question

1 Answers

ICSM Computer
ICSM Computer 01 Jun 2025
Report Abuse

To create and manually set a custom Forms Authentication ticket in ASP.NET, you basically:

  1. Create a FormsAuthenticationTicket object with your custom data.
  2. Encrypt the ticket.
  3. Create a cookie containing the encrypted ticket.
  4. Add the cookie to the HTTP response.

Why create a custom ticket?

  • To store extra user info in the ticket (like roles or user ID).
  • To control ticket expiration and other properties.
  • To avoid relying only on SetAuthCookie or RedirectFromLoginPage.

Step-by-step example in C#:

// 1. Create the ticket
var ticket = new FormsAuthenticationTicket(
    1,                      // Ticket version
    username,               // Username
    DateTime.Now,           // Issue date
    DateTime.Now.AddMinutes(30),  // Expiration date
    isPersistent,           // Persistent cookie?
    "UserRole=Admin;UserID=123", // User data (custom info)
    FormsAuthentication.FormsCookiePath // Cookie path
);

// 2. Encrypt the ticket
string encryptedTicket = FormsAuthentication.Encrypt(ticket);

// 3. Create the cookie with the encrypted ticket
var authCookie = new HttpCookie(FormsAuthentication.FormsCookieName, encryptedTicket)
{
    HttpOnly = true,  // Prevent client-side scripts from accessing the cookie
    Secure = FormsAuthentication.RequireSSL,  // Set secure flag if SSL required
    Path = FormsAuthentication.FormsCookiePath
};

// If the ticket is persistent, set the cookie expiration
if (isPersistent)
{
    authCookie.Expires = ticket.Expiration;
}

// 4. Add the cookie to the response
Response.Cookies.Add(authCookie);

What happens next?

  • On subsequent requests, ASP.NET automatically decrypts the cookie and recreates the FormsIdentity with your ticket data.
  • You can access the custom user data like this:
var identity = (FormsIdentity)User.Identity;
string userData = identity.Ticket.UserData;
// Parse userData string as needed
MindStick Training
Markdown for AI

A clean, structured version of this page for AI assistants and LLMs.

Open .md