asp.net Session 跨域共享

using System.Web; using System; using System.Configuration; using System.Diagnostics; using System.Reflection; using System.Web.SessionState; namespace Ks5uCMS.Web.UI { public class CrossDomainCookie : IHttpModule { private string m_RootDomain = string.Empty; #region IHttpModule Members public void Dispose() { } public void Init(HttpApplication context) { m_RootDomain = ConfigurationManager.AppSettings["RootDomain"]; Type stateServerSessionProvider = typeof(HttpSessionState).Assembly.GetType("System.Web.SessionState.OutOfProcSessionStateStore"); FieldInfo uriField = stateServerSessionProvider.GetField("s_uribase", BindingFlags.Static | BindingFlags.NonPublic); if (uriField == null) throw new ArgumentException("UriField was not found"); uriField.SetValue(null, m_RootDomain); context.EndRequest += new System.EventHandler(context_EndRequest); } void context_EndRequest(object sender, System.EventArgs e) { HttpApplication app = sender as HttpApplication; for (int i = 0; i < app.Context.Response.Cookies.Count; i++) { app.Context.Response.Cookies[i].Domain = m_RootDomain; } } #endregion } }

 Web.Config 配置：

<httpModules> <add type="UrlRewrite.ModuleRewriter,UrlRewrite" name="ModuleRewriter"/> <add name="CrossDomainCookieModule" type="Ks5uCMS.Web.UI.CrossDomainCookie,Ks5uCMS.Web.UI"/> </httpModules>

密钥配置：不同域名下密钥必须一致

<!-- 通过 <authentication> 节可以配置 ASP.NET 使用的 安全身份验证模式， 以标识传入的用户。 --> <authentication mode="Windows" /> <machineKey decryptionKey="FD69B2EB9A11E3063518F1932E314E4AA1577BF0B824F369" validationKey="5F32295C31223A362286DD5777916FCD0FD2A8EF882783FD3E29AB1FCDFE931F8FA45A8E468B7A40269E50A748778CBB8DB2262D44A86BBCEA96DCA46CBC05C3" validation="SHA1" decryption="Auto"/> <sessionState cookieless="false" timeout="50" mode="StateServer" stateConnectionString="tcpip=127.0.0.1:42424" />