ClickOnce appication and Browser cookies

Question

Is it possible for a clickonce application to read browser cookies of the server that delivered the application?  We have a scenario where the application is behind a proxy that sets cookies for user authentication and load-balancing.  However, we notice that once the Browser launches the ClickOnce application, the application stops sending these cookies.  

Some online threads have suggested that ClickOnce may work with 407 proxy authentication required challenge from proxies.  However, this is not an ideal solution as the user is already authenticated in the browser, so why should the user be challenged again?  Using NTLM or Kerberos authentication is also out of question as this proxy is servicing clients over the internet.

Is there a modification that can be done to deployment manifest or application manifest that will allow the the ClickOnce application to read the cookies of the application domain set in the browser cache? 

Answer 1

it's not easy work.

but follows article provides a approach

http://www.codeproject.com/Articles/24519/Make-ClickOnce-Work-With-ASP-NET-Forms-Authenticat

AND ,BTW. i have a question.

Does the ClickOnce has right to perform PInvoke?

---

DON'T TRY SO HARD,THE BEST THINGS COME WHEN YOU LEAST EXPECT THEM TO.

Answer 2

Thank you Matthew

Its interesting approach, but we do not have control on the server.  I wonder how a reverse proxy can provide access to users from the web without requiring any modification on the application server.

I was hoping there was a application manifest configuration file that can be changed to let the launched application on the client to read application cookies from the browser. We notice that Word or Excel launched from a SharePoint server are able to do this for trusted sites.  But the ClickOnce applications are not allowed to read the cookies even for trusted sites.

Answer 3

there is a win api InternetGetCookies which could use in windows form application.

but i don't sure it could be use in clickonce app since some security reason.

you might try it..

http://www.pinvoke.net/default.aspx/wininet/InternetGetCookie.html

---

DON'T TRY SO HARD,THE BEST THINGS COME WHEN YOU LEAST EXPECT THEM TO.