how to use session variables instead of using cookie

[GoogleCodeExporter]

how to use session variables instead of using cookie 
are the cookies not vulnerable ?
can you update a project with use of view state , session variables or some 
other state management technique ?

Original issue reported on code.google.com by depth.vi...@gmail.com on 6 Dec 2011 at 11:43

[GoogleCodeExporter]

Which cookie are you referring to? SocialAuth works using session only.However, 
internally session would ofcourse be writting identification cookie for server 
to identify session. Also, Forms based authentication would write cookie for 
identification.

Original comment by daggar...@brickred.com on 8 Dec 2011 at 8:18

[GoogleCodeExporter]

thanks for the reply , I have seen that after time out the user have to refresh 
the page , I wanted to ask If it possible that after sometime the app check 
automatically the sign in status of user with a provider ,If user is still 
logged in to that provider then reset timer 

Original comment by depth.vi...@gmail.com on 9 Dec 2011 at 12:58

[GoogleCodeExporter]

Hi,

You may check the PopupDemo added in version 2.2
It uses JavaScript to make calls at server to check if user is still logged in. 
That should serve as a great reference point.

In that example, a Web Method is created in ASPX.cs file which returns 
SocialAuthUser.IsLoggedIn() and the method is called using PageMethods.
regards,
Deepak

Original comment by tsg.bric...@gmail.com on 20 Jan 2012 at 11:29

• Changed state: WontFix