+1-888-365-2779
Try Now
More in this section

Forums / Developing with Sitefinity / Detecting Login from external site

Detecting Login from external site

6 posts, 0 answered
  1. Steve
    Steve avatar
    3037 posts
    Registered:
    03 Dec 2008
    22 Jul 2013
    Link to this post
    Is there a way from an external webapp (subdomain, but same domain...not SF based) to ask sitefinity if a user is logged in?

    I tried just looking for like "HttpContext.Current.Request.Cookies["FedAuth"]" but it's just never there on the subdomain site, so that clearly won't work :)

    Steve
  2. Georgi
    Georgi avatar
    3583 posts
    Registered:
    28 Oct 2016
    23 Jul 2013
    Link to this post
    Hi Steve,

    Yep, cookies are per domain, not even per sub-domain :) 

    We do not have such feature for security reasons - we do not want someone to ping a site and start asking if users are logged in. You can do a small web service tough in the Sitefinity site pass parameters like user/e-mail and it should return true/false if the user is online. Or, the web service can just have..

    IList<User> users= SecurityManager.GetLoggedInBackendUsers()

    .. and you'll have all online users at once. 

    Regards,
    Georgi
    Telerik
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
  3. Steve
    Steve avatar
    3037 posts
    Registered:
    03 Dec 2008
    23 Jul 2013 in reply to Georgi
    Link to this post
    Yeah I already have a user service...hmm

    Now if we implemented claims on the webapp...sitefinity could be the issuer and then the site would just "work" to know the logged in state?
  4. Steve
    Steve avatar
    3037 posts
    Registered:
    03 Dec 2008
    23 Jul 2013 in reply to Steve
    Link to this post
    @Georgi,
    ...well...how the heck would I secure this?

    A webreqest from the one site over to sitefinity has ClaimsManager returning IsAuthenticated false...?

    EUGH...next meeting I'm gonna see if we can just move the pages into controls and host in sitefinity

    Steve
  5. Strahil Strahilov
    Strahil Strahilov avatar
    24 posts
    Registered:
    06 Nov 2014
    29 Jul 2013
    Link to this post
    Hi Steve,

    Your scenario is very interesting. Our colleague, Svetla Yankova wrote two great articles about: Single Sign On Between Sitefinity and 3rd Party Applications:

    I believe, these articles will be helpful.


    Regards,
    Strahil Strahilov
    Telerik
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
  6. Steve
    Steve avatar
    3037 posts
    Registered:
    03 Dec 2008
    29 Jul 2013 in reply to Strahil Strahilov
    Link to this post
    Nope, won't work...well...too much work on an old app to convert it to claims is the problem

    I fixed the underlying problem and just locked sitefinity back down on the webconfig...so we can't use thunder or SDA...
6 posts, 0 answered