Session would not retain values and always return null

by

You question is too general with out many clues, so I can give you some points to move on.

[1] set also the domain on the cookies, with out the www., so the cookie can be read and set even if by mistake the www is missing.

<httpCookies domain="yourdomain.com" httpOnlyCookies="true" requireSSL="true"/>

[2] you also need to setup the <forms... with similar parameters (and what ever else you have set)

<forms name=".klidi" path="https://stackoverflow.com/" requireSSL="true" cookieless="UseCookies" 
   domain="yourdomain.com" enableCrossAppRedirects="false" 
        slidingExpiration="true" />

[3] you also need to setup the <roleManager with similar parameters.

<roleManager enabled="true" cacheRolesInCookie="false" cookieProtection="All" cookieSlidingExpiration="true" 
           cookieTimeout="20" domain="yourdomain.com" cookieRequireSSL="true">

and last the most important set this line on your code before you try to set or use any cookie to see if by mistake you did not use secure connection https.

Debug.Assert(HttpContext.Current.Request.IsSecureConnection, "With out https, cookie will not work");

By setting the last line, on your computer when you make your site you can see and diagnose if the problem is coming from non secure connection, because from the moment you set the requireSSL to true, any simple connection will not hold any cookie.

Also try to clear your cookies in the case that the cookie exist as non secure and you have any conflict, and or try other browsers.

You can also read: Can some hacker steal the cookie from a user and login with that name on a web site?

More Related Contents:

  1. I just discovered why all ASP.Net websites are slow, and I am trying to work out what to do about it
  2. Session timeout in ASP.NET
  3. Replacing ASP.Net’s session entirely
  4. What should I do if the current ASP.NET session is null?
  5. ASP.NET: Session.SessionID changes between requests
  6. Forms authentication timeout vs sessionState timeout
  7. Losing Session State
  8. Close/kill the session when the browser or tab is closed
  9. Chrome localhost cookie not being set
  10. How can I share a session across multiple subdomains in ASP.NET?
  11. What is the difference between Session.Abandon() and Session.Clear()
  12. ASP.NET session state provider in Azure [closed]
  13. Session Fixation in ASP.NET
  14. Passing session data between ASP.NET Applications
  15. In ASP.NET, when should I use Session.Clear() rather than Session.Abandon()?
  16. List all active ASP.NET Sessions
  17. ASP.NET Stress Testing
  18. ASP.net session request queuing
  19. ASP.NET MVC – Session is null
  20. asp.net cookies, authentication and session timeouts
  21. ASP.NET: How to access Session from handler? [duplicate]
  22. Session lock causes ASP.Net websites to be slow
  23. Asp.Net Session is null in ashx file
  24. ASP.NET Why are sessions timing out, sessionstate timeout set
  25. What is the maximum size a session variable can hold?
  26. Cache VS Session VS cookies?
  27. IIS Session Timeout vs ASP.NET Session Timeout
  28. asp.net session variables on Session_End
  29. How is HttpOnly get set for ASP.NET_SessionId cookie?
  30. Session_End does not fire?

Leave a Comment