forms-authentication - Does Forms.SetAuthenticationCookie put a cookie on the server or client?

Question

I have a server located at www.abc.com that makes a call to a web app on www.def.com and if the user coming from www.abc.com, authenticates on www.def.com, I call Forms.SetAuthenticationCookie.

Does the cookie get placed on the client (www.abc.com) or the server (www.def.com)? If it stores it on the server, how could I store it on the client instead?

Answer 1

表单身份验证 cookie 只不过是表单身份验证票证的容器。票证作为表单身份验证 cookie 的值与每个请求一起传递，并由服务器上的表单身份验证使用，以识别经过身份验证的用户。

但是，如果我们选择使用无 cookie 表单身份验证，票证将以加密格式在 URL 中传递。使用无 Cookie 表单身份验证是因为有时客户端浏览器会阻止 cookie。

希望它有帮助。