Login functionality for a Silverlight application
I have a silverlight application that requires a user to log in.
The problem is that when you click the refresh button on the webpage, it reloads the site and requires the user to log in again.
What I want is to act like ASP.NET where the user will stay powered up for 20 minutes even if they hit the refresh button.
What mechanism does ASP.NET use to achieve this? Does it use, for example, session variables and how does it expire after 20 minutes?
Thanks.
a source to share
ASP.NET does this on the server side using a variety of techniques. The simplest one can be cookies. Usually people use the session state feature. A sliding scale is used to store the update time.
While you can do this in Silverlight using something like isolated storage, it will not be secure: isolated storage is not encrypted and resides on the local system as well as in ASP.NET where the server can store it where it is secure.
As for what to store: you really don't want that. You have to allow your user to log in, which ends up in a web service on the host. Then you just rely on the ASP.NET authentication system or the other server side. You can create a "perma cookie", but this simply duplicates functionality that already works.
a source to share