2005-01-31 Zoltan Varga <vargaz@freemail.hu>

[mono.git] / mcs / class / System.Web / System.Web.Security / FormsAuthenticationModule.cs

diff --git a/mcs/class/System.Web/System.Web.Security/FormsAuthenticationModule.cs b/mcs/class/System.Web/System.Web.Security/FormsAuthenticationModule.cs
index 1e4f3261160364802ef51b9fee88fc258d58511d..ac9f3c31327939eee985b6195729149a08c49e2a 100644 (file)
--- a/mcs/class/System.Web/System.Web.Security/FormsAuthenticationModule.cs
+++ b/mcs/class/System.Web/System.Web.Security/FormsAuthenticationModule.cs
@@ -7,6 +7,27 @@
 // (C) 2002 Ximian, Inc (http://www.ximian.com)
 //
 
+//
+// Permission is hereby granted, free of charge, to any person obtaining
+// a copy of this software and associated documentation files (the
+// "Software"), to deal in the Software without restriction, including
+// without limitation the rights to use, copy, modify, merge, publish,
+// distribute, sublicense, and/or sell copies of the Software, and to
+// permit persons to whom the Software is furnished to do so, subject to
+// the following conditions:
+// 
+// The above copyright notice and this permission notice shall be
+// included in all copies or substantial portions of the Software.
+// 
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+// NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+// LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+// OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+// WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+//
+
 using System;
 using System.Security.Principal;
 using System.Text;
@@ -61,7 +82,12 @@ namespace System.Web.Security
                                return;
 
                        FormsAuthenticationTicket ticket = FormsAuthentication.Decrypt (cookie.Value);
-                       ticket = FormsAuthentication.RenewTicketIfOld (ticket);
+                       if (ticket == null || ticket.Expired)
+                               return;
+
+                       if (config.SlidingExpiration)
+                               ticket = FormsAuthentication.RenewTicketIfOld (ticket);
+
                        context.User = new GenericPrincipal (new FormsIdentity (ticket), new string [0]);
 
                        cookie.Value = FormsAuthentication.Encrypt (ticket);