利用cookie的跨域单点登录的简单实现

Configuration:
1. Web.Config
在两个站点的配置配置文件machine节点上相同的validationKey, decryptionKey and validation的值，如
<machineKey validationKey="282487E295028E59B8F411ACB689CCD6F39DDD21E6055A3EE480424315994760A
DF21B580D8587DB675FA02F79167413044E25309CCCDB647174D5B3D0DD9141"
decryptionKey="8B6697227CBCA902B1A0925D40FAA00B353F2DF4359D2099"
validation="SHA1" />
2. IIS
在IIS->Directory security 上添加 "ASPNET Machine Account" 的所有权限
Coding:
代码示例
站点1的->Login.aspx.cs
if (login_Successful)
{
//创建一个cookie
HttpCookie cookie = new HttpCookie("strCookieName");
//设置cookie的值 可以保存登录名称信息
cookie.Value ="set_cookie_value";
//设置 cookie 的生存周期5 分钟
DateTime dtNow = DateTime.Now;
TimeSpan tsMinute = new TimeSpan(0, 0, 5, 0);
cookie.Expires = dtNow + tsMinute;
//添加cookie
Response.Cookies.Add(cookie);
Response.Write("Cookie written. ");
}
检查cookie是否存在
站点2->Default.aspx.cs
protected void Page_Load(object sender, EventArgs e)
{
//获取cookie
HttpCookie cookie = Request.Cookies["strCookieName"];
//检查cookie 是否存在
if (cookie != null)
{
ReadCookie();
}
else
{
lblCookie.Text = "Cookie not found. ";
}
}
protected void ReadCookie()
{
//Get the cookie name the user entered
//Grab the cookie
HttpCookie cookie = Request.Cookies["strCookieName"];
//Check to make sure the cookie exists
if (cookie == null)
{
lblCookie.Text = "Cookie not found. ";
}
else
{
//Write the cookie value
String strCookieValue = cookie.Value.ToString();
lblCookie.Text = "The cookie contains: " + strCookieValue + "";
}
}