set ASP.NET SessionId cookie path attribute in web.config

Question

set ASP.NET SessionId cookie path attribute in web.config

Mrutyunjaya Sahu 1

Hi,

I am trying to set path of ASP.NET SessionId cookie in web.config file but in response header cookie path always showing "/" as cookie path.

I have tried configuring the cookie path in outbound rule in web.config and in forms authentication tag also but none of this seems working for the same.

Any help would be highly appreciated.

Thanks in advance

AgaveJoe 30,031 Reputation points

2021-08-13T12:35:17.753+00:00

I believe you need to write a custom session manager to change the path.

What problem does setting the Session cookie path solve? Are you trying to share Session across several sites? If so, use SQL server to store session.

Google search

Yijing Sun-MSFT 7,091

Hi @Mrutyunjaya Sahu ,
Could you tell us what are the details of your operations.Are you involved in multiple domains and multiple applications? And how do you write the rule in the web.config.
Do you tried to customize your session_id for session by SessionIDManager? Just like this:
Configure sessionIDManagerType in web.config.

 <sessionState sessionIDManagerType="WebFormCases2.Utils.MySessionIDManager"></sessionState>  
  </system.web>

MySessionIDManager

namespace WebFormCases2.Utils  
{  
    public class MySessionIDManager : SessionIDManager, ISessionIDManager  
    {  
        void ISessionIDManager.SaveSessionID(HttpContext context, string id, out bool redirected, out bool cookieAdded)  
        {  
            base.SaveSessionID(context, id, out redirected, out cookieAdded);  
  
            if (cookieAdded)  
            {  
                var name = "ASP.NET_SessionId";  
                var cookie = context.Response.Cookies[name];  
                cookie.Path = "/IdentityExe";  
            }  
        }  
        }  
}

Best regards,
Yijing Sun

HIMANGSHU BAISHYA 0 Reputation points

2023-08-25T06:28:09.95+00:00

Hi @Yijing Sun-MSFT ,

I too was facing the same issue as mentioned by Mrutyunjaya Sahu.However I did apply the fix as mentioned by you.It's working fine.But whenever I try to login to my website using credentials I get an error message as "Validation of viewstate MAC failed" . I tried giving the application folder path as well a virtual directory path which maps to the application folder itself but still login fails.

Can you please guide as to what could be the issue here ?.

Thanks,
Himangshu

Your answer

AgaveJoe 30,031 Reputation points

2021-08-13T12:35:17.753+00:00

I believe you need to write a custom session manager to change the path.

What problem does setting the Session cookie path solve? Are you trying to share Session across several sites? If so, use SQL server to store session.

Google search
Yijing Sun-MSFT 7,091 Reputation points

2021-08-16T03:00:12.16+00:00

Hi @Mrutyunjaya Sahu ,
Could you tell us what are the details of your operations.Are you involved in multiple domains and multiple applications? And how do you write the rule in the web.config.
Do you tried to customize your session_id for session by SessionIDManager? Just like this:
Configure sessionIDManagerType in web.config.

<sessionState sessionIDManagerType="WebFormCases2.Utils.MySessionIDManager"></sessionState> </system.web>

MySessionIDManager

namespace WebFormCases2.Utils { public class MySessionIDManager : SessionIDManager, ISessionIDManager { void ISessionIDManager.SaveSessionID(HttpContext context, string id, out bool redirected, out bool cookieAdded) { base.SaveSessionID(context, id, out redirected, out cookieAdded); if (cookieAdded) { var name = "ASP.NET_SessionId"; var cookie = context.Response.Cookies[name]; cookie.Path = "/IdentityExe"; } } } }

Best regards,
Yijing Sun
HIMANGSHU BAISHYA 0 Reputation points

2023-08-25T06:28:09.95+00:00

Hi @Yijing Sun-MSFT ,

I too was facing the same issue as mentioned by Mrutyunjaya Sahu.However I did apply the fix as mentioned by you.It's working fine.But whenever I try to login to my website using credentials I get an error message as "Validation of viewstate MAC failed" . I tried giving the application folder path as well a virtual directory path which maps to the application folder itself but still login fails.

Can you please guide as to what could be the issue here ?.

Thanks,
Himangshu

Share via

set ASP.NET SessionId cookie path attribute in web.config

Your answer