Is Cookies generated by WebSecurity.Login immutable ?

Question

We are writing WCF service; which will be consumed by IPhone and Android application.

For authentication we are using

WebSecurity.Login

and was wondering, the cookie generated; is it immutable ?

Answer 1

http://stackoverflow.com/questions/17103130/how-to-use-token-generated-at-login-time-for-security-when-user-logs-in-a-php

Answer 2

So, based on that article you are suggesting to use token in the header for every call and ditch the cookie ?

Answer 3

could you please tell what does the following mean:

Is Cookies generated by WebSecurity.Login immutable?

I am not understand.

Answer 4

I'm using WebMatrix libraries for user authentication. Looking at using same code for Web, and Mobile Apps (IPhone and Android).

If you are making concurrent API requests, it's hard to track mutable cookie.

Answer 5

Hi,

We can let the cookie immutable.

This thread has answered:
http://forums.asp.net/t/1652838.aspx .

Answer 6

Sorry, I was going through the article and it talks about persistence. Maybe, I'm missing something.