跨子域的Asp.NET cookie不更新和不過期

Question

我有2個子域，我需要從兩個網站設置和讀取相同的cookie。

當我使用本地主機時，一切工作正常。

當我切換到使用有效的網址時，我更新它時cookie的信息並未真正更新（註銷時有效日期）。

我必須設置爲「.mysite.com」

什麼是錯的cookie域？

Answer 1

這裏是我的代碼：（工作在本地主機上正常，但不子域，從來沒有註銷用戶因爲cookie犯規得到過期）

登錄頁面：

FormsAuthentication.SetAuthCookie(UserName.Text, true); 
    // set the active collab cookie 
    Member member = MemberManager.GetMemberByUsername(UserName.Text); 

    HttpCookie cookie = new HttpCookie("Token", member.Profile.Token); 
    cookie.Domain = ConfigurationManager.AppSettings["CookieDomain"]; 
    cookie.Expires = DateTime.Now.AddYears(1); 
    Response.Cookies.Add(cookie); 

Globax ASAX

if (HttpContext.Current.Request.Cookies["Token"] != null) { 
     string token = HttpContext.Current.Request.Cookies["Token"].Value; 
     if (!string.IsNullOrEmpty(token)) { 
       // If the user is logged in with a different token 
       // or not logged in at all 
       // then log them in with the token from the cookie 
       if ((MemberManager.CurrentMember != null && MemberManager.CurrentMember.Profile.Token != token) || User == null) { 

        Member member = MemberManager.GetMemberByToken(token); 
        if (member != null) { 
         FormsAuthentication.SetAuthCookie(member.User.UserName, true); 
       } 
      } 
       } 
      } 

註銷碼：

if (Request.Cookies["Token"] != null) { 
       HttpCookie aCookie = Request.Cookies["Token"]; 
       aCookie.Expires = DateTime.Now.AddDays(-1); 
       Response.Cookies.Add(aCookie); 
} 

的Web.Config

<machineKey 
     validationKey="{-snip-}" 
     decryptionKey="{-snip-}" 
     validation="SHA1" 
     decryption="AES" /> 

<authentication mode="Forms"> 
     <forms name="AuthCookie" 
      path="/" 
      loginUrl="~/login.aspx" 
      protection="All" 
      timeout="60"> 
     </forms> 
    </authentication> 

Answer 2

試試這個：

if (Request.Cookies["Token"] != null) { 
       HttpCookie aCookie = Request.Cookies["Token"]; 
       aCookie.Expires = DateTime.Now.AddDays(-1); 
       Response.Cookies["Token"] = aCookie; 
} 

而不是增加它的，將其設置爲現有的Cookie。在web.config

Answer 3

你的窗體身份驗證設置需要，從而實現跨應用重定向：

<authentication mode="Forms"> 
    <forms loginUrl="~/login.aspx" protection="All" timeout="960" name=".ASPXAUTH" path="/" requireSSL="false" slidingExpiration="false" defaultUrl="~/default.aspx" enableCrossAppRedirects="true"/> 
</authentication> 

Answer 4

答案是在註銷

HttpCookie aCookie = Request.Cookies["Token"]; 
aCookie.Expires = DateTime.Now.AddDays(-1); 
aCookie.Domain = ConfigurationManager.AppSettings["CookieDomain"]; 
Response.Cookies.Add(aCookie);