asp.net mvc - C# MVC multipletabs session issue -


we facing 1 issue user using multiple tabs, each tab share 1 session particular user want each tab have unique session, have session mode in "inproc" added cookieless="useuri" i.e. sessionstate mode="inproc" cookieless="useuri". adding helped each tab having unique session worked in ie private mode not in ie normal mode, chrome & firefox, gets stuck on login page, our login method azure active directory i.e. (federation)authentication, page keeps loading , not moving homepage of our application, don't know what's going on please help.

fyi, storing class properties in session using sessionstate mode="inproc" cookieless="useuri" or bad way?

here code have used aad authentication

public void configureauth(iappbuilder app) {     app.setdefaultsigninasauthenticationtype(cookieauthenticationdefaults.authenticationtype);  // authentication type cookies      app.usecookieauthentication(new cookieauthenticationoptions());      app.useopenidconnectauthentication(         new openidconnectauthenticationoptions         {             clientid = clientid,             authority = authority,             postlogoutredirecturi = postlogoutredirecturi,             notifications = new openidconnectauthenticationnotifications                {                    authorizationcodereceived = (context) =>                     {                         x509certificate2 cert = null;                             x509store store = new x509store(storelocation.currentuser);                        // here code certification & access token                         return task.fromresult(0);                    }                }         }); }

this not possible. when session created, cookie sent down client session id, , web browser blindly send cookie each request same domain, whether in 1 tab or hundred. if session cookie received server, restore session.

it works in "private" mode not because of changes made, because in private mode each tab gets totally unique context, including cookies. however, in normal browsing mode, tabs have access cookie, , there's nothing can that.


Comments

Post a Comment

Popular posts from this blog

Is there a better way to structure post methods in Class Based Views -

i'm using class based views in django , never specify url in ajax calls , omit action parameter in form because know these requests go through post method of class based view. notice view - profile page make many requests depending on user updating on page - post method become convoluted , if/else mess example: def post(self, request, *args, **kwargs): # handle user changing available date if request.post.get('availabledate') != none: self.updateavailabledate(request) return jsonresponse({'result':'success'}) if request.post.get('newprojectname') != none: creative_user = creativeuserprofile.objects.get(id = request.user.id) project = project.create_project(creative_user, request.post['newprojectname']) project.save() return jsonresponse({'projectid': project.id }) if request.post.get('projectimage') != none , request.files['file']: proj...
Read more

performance - Why is XCHG reg, reg a 3 micro-op instruction on modern Intel architectures? -

i'm doing micro-optimization on performance critical part of code , came across sequence of instructions (in at&t syntax): add %rax, %rbx mov %rdx, %rax mov %rbx, %rdx i thought had use case xchg allow me shave instruction , write: add %rbx, %rax xchg %rax, %rdx however, dimay found agner fog's instruction tables , xchg 3 micro-op instruction 2 cycle latency on sandy bridge, ivy bridge, broadwell, haswell , skylake. 3 whole micro-ops , 2 cycles of latency! 3 micro-ops throws off 4-1-1-1 cadence , 2 cycle latency makes worse original in best case since last 2 instructions in original might execute in parallel. now... cpu might breaking instruction micro-ops equivalent to: mov %rax, %tmp mov %rdx, %rax mov %tmp, %rdx where tmp anonymous internal register , suppose last 2 micro-ops run in parallel latency 2 cycles. given register renaming occurs on these micro-architectures, though, doesn't make sense me done way. why wouldn't register renamer ...
Read more

c# - Asp.net web api : redirect unauthorized requst to forbidden page -

im trying redirect unauthorized request forbidden page instead i'm getting forbidden page in response body , how can fix ? here's startup class : app.createperowincontext(storecontext.create); app.createperowincontext<applicationusermanager>(applicationusermanager.create); app.createperowincontext<applicationsigninmanager>(applicationsigninmanager.create); app.usecookieauthentication(new cookieauthenticationoptions { authenticationtype = defaultauthenticationtypes.applicationcookie, expiretimespan = timespan.fromdays(30), }); app.useexternalsignincookie(defaultauthenticationtypes.externalcookie); app.usetwofactorsignincookie(defaultauthenticationtypes.twofactorcookie, timespan.fromminutes(5)); app.usetwofactorrememberbrowsercookie(defaultauthenticationtypes.twofactorrememberbrowsercookie); the method im trying reach : [httpget] [authorize(roles = "admin")] public string getcurrentusername() { return userman...
Read more