Keith
Keith

Reputation: 2628

ASP.NET Cookie not set when using https

I have an ASP.NET application which stores a "Remember Me" token as a cookie; it worked fine until I implemented SSL.

Using FireCookies, I never see my cookie (named "_rmtoken") though ".ASPXAUTH", "ASP.NET_SessionId" and other cookies do show up. Here is the code I use to set the cookie:


public static void SetRememberMeCookie(HttpContext context, Guid token)
{
    DeleteRememberMeCookie(context);
    var loginCookie = new HttpCookie("_rmtoken")
    {
        Value = token.ToString(),
        Expires = DateTime.Today.AddMonths(1), 
        HttpOnly=false, 
        Secure = false
    };
    context.Response.Cookies.Add(loginCookie);
}


Upvotes: 3

Views: 1238

Answers (2)

Hoan Huynh
Hoan Huynh

Reputation: 362

Simply try to set cookie's domain property for your cookies:

Response.Cookies["your_cookie_name"].Domain = "yourdomain.com";

... or check out this article to get more information.

Upvotes: 1

heads5150
heads5150

Reputation: 7463

Change this line from false to true

Secure = false

Msdn Reference - HttpCookie.Secure property

Upvotes: 1

Related Questions