Reputation: 2628
I have an ASP.NET application which stores a "Remember Me" token as a cookie; it worked fine until I implemented SSL.
Using FireCookies, I never see my cookie (named "_rmtoken") though ".ASPXAUTH", "ASP.NET_SessionId" and other cookies do show up. Here is the code I use to set the cookie:
public static void SetRememberMeCookie(HttpContext context, Guid token)
{
DeleteRememberMeCookie(context);
var loginCookie = new HttpCookie("_rmtoken")
{
Value = token.ToString(),
Expires = DateTime.Today.AddMonths(1),
HttpOnly=false,
Secure = false
};
context.Response.Cookies.Add(loginCookie);
}
Upvotes: 3
Views: 1238
Reputation: 362
Simply try to set cookie's domain property for your cookies:
Response.Cookies["your_cookie_name"].Domain = "yourdomain.com";
... or check out this article to get more information.
Upvotes: 1
Reputation: 7463
Change this line from false to true
Secure = false
Msdn Reference - HttpCookie.Secure property
Upvotes: 1