利用cookie的跨域单点登录的简单实现

Configuration:

1. Web.Config

在两个站点的配置配置文件machine节点上相同的validationKey, decryptionKey and validation的值，如

<machineKey validationKey="282487E295028E59B8F411ACB689CCD6F39DDD21E6055A3EE480424315994760A
DF21B580D8587DB675FA02F79167413044E25309CCCDB647174D5B3D0DD9141"
decryptionKey="8B6697227CBCA902B1A0925D40FAA00B353F2DF4359D2099"
validation="SHA1" />

2. IIS

在IIS->Directory security 上添加 "ASPNET Machine Account" 的所有权限

Coding:

代码示例

站点1的->Login.aspx.cs

if (login_Successful)

{

//创建一个cookie

HttpCookie cookie = new HttpCookie("strCookieName");

//设置cookie的值  可以保存登录名称信息

cookie.Value ="set_cookie_value";

//设置 cookie 的生存周期5 分钟

DateTime dtNow = DateTime.Now;

TimeSpan tsMinute = new TimeSpan(0, 0, 5, 0);

cookie.Expires = dtNow + tsMinute;

//添加cookie

Response.Cookies.Add(cookie);

Response.Write("Cookie written. ");

}

检查cookie是否存在

站点2->Default.aspx.cs

protected void Page_Load(object sender, EventArgs e)

{

//获取cookie

HttpCookie cookie = Request.Cookies["strCookieName"];

//检查cookie 是否存在

if (cookie != null)

{

ReadCookie();

}

else

{

lblCookie.Text = "Cookie not found. ";

}

}

protected void ReadCookie()

{

//Get the cookie name the user entered

//Grab the cookie

HttpCookie cookie = Request.Cookies["strCookieName"];

//Check to make sure the cookie exists

if (cookie == null)

{

lblCookie.Text = "Cookie not found. ";

}

else

{

//Write the cookie value

String strCookieValue = cookie.Value.ToString();

lblCookie.Text = "The cookie contains: " + strCookieValue + "";

}

}