Question

In the authentication control I have the following line to mark a user as authenticated in the system (after checking out the password):

FormsAuth.SignIn(userName, rememberMe);

and if I redirect, which is the standard behvaior, everything is ok. But if I show a view right away, the usual ways to check whether a user is authenticated:

Page.User.Identity.IsAuthenticated
Request.IsAuthenticated

don’t work. They say the user is not authenticate. How can I make the authentication effective immediately or is there another way to check that would allow me to find out when the user just logged in?

Answer 1

FormsAuth.SignIn is a function which is generated when you create a new ASP.NET MVC project from Visual Studio.

That function simply calls FormsAuthentication.SetAuthCookie, which according to the docs, sets the authentication cookie in the response.

This explains why it works if you redirect (because the client will play back the cookie in the subsequent request), but not right after the call.

Redirecting is the right/conventional way to do this, but if you absolutely insist on checking authentication before a redirect, then you could create an IsAuthenticated flag in session state and refer to that when checking.