Asp.Net Forms Authentication, Cached User Control and Session ID

I faced the following problem that i wanted to share with you, I have a user control that populates a menu to be shown to the user, the menu is populated based on the user privileges. i wanted to cache this user control so that the menu population logic won't run for every page request, so i decided to cache the output of the user control based on the SessionID, to do this i added the following attribute to the control

<%@ OutputCache Duration="1" VaryByCustom="Session" VaryByParam="None" %>

the VaryByCustom attribute allows you to vary the cached output by your defined string, having specifying the "Session" as my defined string i had to override the HttpApplication.GetVaryByCustomString method in the Global.asax file

Overrides Function GetVaryByCustomString(ByVal context As HttpContext, ByVal custom As String) As String
 If custom = "Session" Then
 Return Session.SessionID
Else
 Return ""
 End If
 End Function

The function simply returns the session id so that the user control is cached for this user session only, until now everything is working perfectly, and the menu user control is cached correctly.

later on i added a Logout LinkButton

Protected Sub lnk_Click(ByVal sender As Object, ByVal e As System.EventArgs)

System.Web.Security.FormsAuthentication.SignOut()
Session.Abandon()
Response.Redirect("~/Admin/default.aspx")

End Sub

The code is supposed to log out the user and cleans the session, i expected that the cached user control to be ignored a new version to show but the user control is still showing the cached version, for some unknown reason the Asp.Net is still returning the same session id although the Session.Abandon method should create a new session object.

after googling a little i found this knowledge base article and this blog entry that describe the problem and the solution, the solution was to explicitly remove the asp.net cookie that stores the session id

Protected Sub lnk_Click(ByVal sender As Object, ByVal e As System.EventArgs)
System.Web.Security.FormsAuthentication.SignOut()
Session.Abandon()
Response.Cookies.Add(New HttpCookie("ASP.NET_SessionId", ""))
Response.Redirect("~/Admin/default.aspx")
End Sub

Hope this helps :)

Technorati tags:

Comments

Post a Comment

Popular posts from this blog

Documentum DQL Query Custom Data Extension For SQL Server Reporting Services

When it comes to Reporting SQL Reporting Services is my favorite choice. SQL Reporting Services has a plenty of data source types but unfortunately Documentum is not one of them, whenever we have to develop some reports based on the data in Documentum we first develop a web service that contains the necessary DQL queries and returns the result in a Data Set, then we create an XML data source that consumes this web service and use it in our reports. Fortunately SQL Reporting Services allows you to extend its data access capabilities by developing a custom data extension (CDE)that retrieves data from your custom data source. I developed a Custom Data Extension for Documentum that allows you to specify a Documentum Repository as a data source and provide your DQL query that will populate your report, I used the Reporting Services SDK Sample (FsiDataExtension) and this Article as starting points You can download the extension from here To install the extension: you have to install the ex...
Read more

Silverlight 4.0 Tutorial (12 of N): Collecting Attendees Feedback using Windows Phone 7

Image
You can find a list of the previous tutorial posts here Continuing our RegistrationBooth Application… It’s very important to collect the attendees feedback to help us improve the future sessions/events we might organize, we can go ahead and implement this functionality in the RegistrationBooth application. but in this post we will take a different approach, we will implement a Windows Phone 7 application that attendees can use on their phones to submit their feedback. Luckily for us Windows Phone 7 uses Silverlight as its development platform (along with XNA), the Silverlight version on Windows Phone is not the same one as the desktop version, think of this as a compact version that fits the phone capabilities. Before we start creating the phone application, first let’s think how we will bring the data to the phone, in the case of the Silverlight application we used WCF RIA services (DomainService) which provided rich client experience for the Silverlight application, Unfortunate...
Read more

Using taco to create Ionic projects for the Windows platform

Image
Recently Microsoft released Tools for Apache Cordova Command Line Interface (TACO CLI), by using TACO, you can quickly start building awesome Apache Cordova apps really and leave all the plumbing of the different platforms dependencies, plugins, etc. to the tools to take care of. For example the following few commands create a cordova project based on the ionic base template, add the android platform to the project, install the platform requirements, build the app, and run it in the emulator: $ taco create sampleApp --template https://github.com/driftyco/ionic-app-base $ cd sampleApp $ taco platform add android $ taco install-reqs android $ taco build android $ taco emulate android Check the TACO home page of for installation instructions and more information http://taco.tools/ . I ran into a problem when i created a new project based on the ionic base template and tried to run it on a windows 8.1 emulator, to reproduce the issue use the following taco commands to cr...
Read more