还是Forms验证

[yibin2006]

<authentication mode="Forms">
<forms defaultUrl="default.aspx" loginUrl="default.aspx" domain="" path="/" name=".TESTDEMO" ></forms>
</authentication>
采用Forms验证
登录后创建一个票据：
string userData = this.username.Value + "$" + userid.ToString();
FormsAuthenticationTicket Ticket = new FormsAuthenticationTicket(1, FormsAuthentication.FormsCookieName, DateTime.Now, DateTime.Now.AddDays(1), SaveCookies, userData, FormsAuthentication.FormsCookiePath);
string HashTicket = FormsAuthentication.Encrypt(Ticket);
HttpCookie UserCookie = new HttpCookie(FormsAuthentication.FormsCookieName, HashTicket);
if (SaveCookies)
UserCookie.Expires = Ticket.Expiration;
Response.Cookies.Add(UserCookie); //输出Cookie
FormsAuthentication.RedirectFromLoginPage(this.username.Value,SaveCookies);
按理说，这个Ticket的UserData中应该有username$userid
可结果呢？
在另一个页面中获取ticker并打印出属性：
FormsAuthenticationTicket ticket = ((FormsIdentity)Page.User.Identity).Ticket;
foreach (PropertyInfo p in ticket.GetType().GetProperties())
{
Response.Write(p.Name+"==="+p.GetValue(ticket,null)+"<br />");
}
值如下：
Version===2
Name===111111
Expiration===2007-6-12 9:43:08
IssueDate===2007-6-12 9:13:08
IsPersistent===False
Expired===False
UserData===
CookiePath===/
UserData为空了....
怎么回事？
如果把 <forms defaultUrl="default.aspx" loginUrl="default.aspx" domain="" path="/" name=".TESTDEMO" ></forms>中的domain设为"/"就行,但这样一来,注销就失效了,这个地方应该如何设定值？

[Aden]

<authentication mode="Forms">
<forms name=".TESTDEMO" loginUrl="default.aspx" protection="All" timeout="60" path="/">
</forms>
</authentication>

[bsing]

Global.asax:

void Application_AuthenticateRequest(object sender, EventArgs e)
{
try
{
if (Context.Request.Cookies[CookieName] != null)
{
HttpCookie authCookie = Context.Request.Cookies[CookieName];
FormsAuthenticationTicket authTicket = FormsAuthentication.Decrypt(authCookie.Value);
string[] roles = new string[] { "Member" };
//这里改成你响应的ticket里面读取到的roles

GenericIdentity genericIdentity = new GenericIdentity(authTicket.Name);
GenericPrincipal genericPrincipal = new GenericPrincipal(genericIdentity, roles);
Context.User = genericPrincipal;
}
else
{
Context.User = null;
}
}
catch
{
Context.User = null;
}
}

[WNASP]

GZ

[yibin2006]

FormsAuthenticationTicket ticket = ((FormsIdentity)Page.User.Identity).Ticket;
这个获取的根本不是登录时创建的ticket...
如何才能真正获取登录时创建的Ticket?

[bsing]

从cookie里面读
FormsAuthenticationTicket Ticket = FormsAuthentication.Decrypt(HttpContext.Current.Request.Cookies[cookieName].Value);

[yibin2006]

TO:bsing(知其白守其黑,为天下式.为天下式,常德不忒,复归於无极)
读取来的ticket也不是我写进去的那个。
怀疑是不是写cookie时写错了？
FormsAuthenticationTicket Ticket = new FormsAuthenticationTicket(1, this.username.Value, DateTime.Now, DateTime.Now.AddDays(1), SaveCookies, userData, FormsAuthentication.FormsCookiePath);

string HashTicket = FormsAuthentication.Encrypt(Ticket);
HttpCookie UserCookie = new HttpCookie(FormsAuthentication.FormsCookieName, HashTicket);
UserCookie.Domain = FormsAuthentication.CookieDomain;

if (SaveCookies)
UserCookie.Expires = Ticket.Expiration;
Response.Cookies.Add(UserCookie);
这有问题么？