CODEWITHSUNDEEP
asp.netasp.net-mvchttpsession
D3vy
D3vy

Reputation: 986

ASP.NET MVC SessionID reset on every request

I have an ASP.NET MVC application that is exhibiting some strange behavior...

Each page request gives me a new Session ID, I have tried everything that I can think of and its still not working.

The session is not empty, I am writing data to it on session start.

I have read the other questions on here and have checked: 1. All requests and coming from and going to the same domain. 2. The session is not empty. 3. The session is not being abandoned anywhere in the code.

I have used fiddler to confirm that the server is giving a new session ID on every request.

I have also checked the value of Session.IsNewSession and this is TRUE.

I must be missing something - if you have any idea what it might be I would really appreciate the help!

Fiddler output: Fiddler screen shot 1

Fiddler screen shot 2

Upvotes: 0

Views: 932

Answers (1)

Robert McKee
Robert McKee

Reputation: 21477

You are sending a session cookie that is marked "secure", but are making requests through HTTP (insecure). Either access your site through https, or change your session cookie to be non-secure.

enter image description here

Upvotes: 3

Related Questions