Click to See Complete Forum and Search --> : How to end Cookie's Session?


vijay_83
06-21-2007, 01:25 AM
Hi,

Iam working in a webapplication in which I am using RSA cookie authentication to login. I login using secure RSA ID in which i login using different users with different Tokens such as Admin , client etc.., for ex.. if i login using Admin account and RSA pincode i have to redirect to a different destination page than that of the client account's destination page. The thing is that i have written RSA secured Cookie for login in a page called Authorize.aspx as follows in the HTML page of Authorize.aspx:

<body MS_POSITIONING="GridLayout">
<%


Dim RSACookieAPI
'//Response.Cookies["RSACookieAPI"].Expires = DateTime.Now.AddYears(-30)
RSACookieAPI = Server.CreateObject("Rsacookieapi.RSACookie")
%>

Hello <%=RSACookieAPI.RSAGetUserName() %>
<%
session("rsauser")=RSACookieAPI.RSAGetUserName()
%>

<%
Response.Redirect("auth.aspx")
%>



</body>

My question is that when i click logout in the destination page for each account the RSA cookie's time frame and user's session should expire and come to the home page. I don't know how to end the RSA cookie's session as i have different accounts in each page from which i logout. So pls help me with this issue. i think i have confused u a bit with my question. Sorry for that. pls help me with this issue.

Thanks and Regards
Vijay.

gsrinivasan1
01-27-2009, 08:51 PM
hi
RSACookieAPI = Server.CreateObject("Rsacookieapi.RSACookie")

RSACookieAPI.RSAGetUserName()

is returning me empty string

I also set AspCompat ="true" at the page level. Any Help appreciated
Srini


edited: e-mail address removed. personal contact information prohibited. respond via public forum, or via PM, not e-mail please

tattooedscorpdc
02-16-2009, 03:12 PM
the answer I believe lies in your RSATokenAPI documentation. If I recal correctly from my Federal Governement programming days , it is a simple call like RSATokenAPI.session.clear.

Larry D
MS Architect Evangelist

bluestartech
02-16-2009, 03:21 PM
if you know the name of the cookie you can set it to blank value in the http header