跨子域的asp.net表单身份验证

发布于 2024-11-30 11:18:11 字数 1222 浏览 2 评论 0原文

这应该很简单，但我不知道我错过了什么。

我正在跨子域使用表单身份验证，

我有一个父域 parent.com 和两个子域 portal.parent.com 和 auth.parent.com。 auth.parent.com 是身份验证站点。

当未授权用户访问portal.parent.com/site时，他们将被重定向到auth.parent.com/Account/LogOn?ReturnUrl=%2fsite，成功后登录时他们被重定向到auth.parent.com/site，这就是问题所在。我原以为会被重定向回 portal.parent.com/site。

上的配置

我在两个网站portal.parent.com/site web.config

<authentication mode="Forms">
  <forms loginUrl="http://auth.parent.com/Account/LogOn" enableCrossAppRedirects="true" domain=".parent.com" timeout="2880" />
</authentication>

auth.parent.com/site web.config

 <authentication mode="Forms">
  <forms loginUrl="~/Account/LogOn" enableCrossAppRedirects="true" domain=".parent.com" timeout="2880" />
</authentication>

（返回网址除外），身份验证工作正常，即如果我返回portal.parent.com/site我可以看到用户已通过身份验证，并且我可以访问身份信息。

我正在阅读这个问题跨子域的表单身份验证

但对我的情况没有特别帮助。

谢谢

原文

This should be simple but i dont know what i am missing.

I am using forms authentication across sub domains,

I have a parent domain, parent.com and two sub domains portal.parent.com and auth.parent.com. auth.parent.com is the authenticating site.

When an unautherized users access portal.parent.com/site, They will be redirected to auth.parent.com/Account/LogOn?ReturnUrl=%2fsite, after a successfull login they are redirected toauth.parent.com/site, and that the problem. I was expecting to be redirected back to portal.parent.com/site.

my configuration on boths sites

portal.parent.com/site web.config

<authentication mode="Forms">
  <forms loginUrl="http://auth.parent.com/Account/LogOn" enableCrossAppRedirects="true" domain=".parent.com" timeout="2880" />
</authentication>

auth.parent.com/site web.config

 <authentication mode="Forms">
  <forms loginUrl="~/Account/LogOn" enableCrossAppRedirects="true" domain=".parent.com" timeout="2880" />
</authentication>

other than the return url, the authentication is working fine, i.e If i go back to portal.parent.com/siteI can see the user authenticated and i can access the Identity info.

I was reading this question Forms Authentication across Sub-Domains

But didnt help specifically in my case.

Thanks

分享到QQ

分享到微博