Security Token / Cross Domain Cookies in Classic ASP?

I have an interesting puzzle.

We have a site that is a completely separate domain, we say http://www.x.com and our own site, which is http://www.y.com . Y.com is actually a classic ASP site and we are not converting to .NET at this time.

The problem is that there is a link to x.com that redirects to y.com from the members area. We want to "authenticate" the user to make sure they are a member of another site. If they are, they are directed to the member area on y.com. If not, they must provide y.com login information.

Cookies obviously don't work due to cross-domain security, but is there a way to get around this? I also looked at the service for tokens, but I don't know exactly how it works in classic ASP. Any ideas or suggestions?

+2


a source to share


1 answer


What I did when I needed to pass cross domain information what is the hash information to one variable and pass url / page as another variable as a post to a page on y.com. This page will decrypt the data, set the cookies and session variables, and then redirect or server.transfer to the passed page. The same can work from y.com to x.com.



0


a source







All Articles