Home/ Questions/Q 7444909
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-29T11:36:53+00:00

We are using FormsAuthentication with custom MembershipProvider and custom RolePrivoder. For our Users we

  • 0

We are using FormsAuthentication with custom MembershipProvider and custom RolePrivoder. For our Users we have a unique UserName, ID (mssql auto-key) and a GUID (all three unique).

I’m not sure which one to use for the Formsauthentication:

FormsAuthentication.GetAuthCookie(userName, false);

UserName, ID or GUID. Can we even store all three informations as UserData in the FormsTicket.

Per Default Asp.net takes the UserName (e.g. E-Mail adress). But I think UserName is a little bit weak if it is stored on the client. A MSSQL Auto-Key also.

So what is the securest way?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You can serialize and encrypt your UserData object to a string and use that for the cookie.

    I answered a similar question about that here:
    Store user data in MVC 2

    • 0