Losing user cookies being redirected from payment gateway

Nikhil Srivastava

I am using ASP.net MVC5 for my e-commerce project . I am not using any SSL .

I have also successfully integrated the payment gateway. The problem i am facing is that while i am posting data to the payment gateway it process the payment and send backs the response to our web application action method the user gets logged out i.e. User.idenity sets back to null .

I think it occurs beacuse of HTTP to HTTPS connection as every gateway uses https as a security. and after getting redirected to https it removes all the cookies and session data.

But I don't want to use https connection in order to retain the User login session . Please tell me how to retain my user signin state after it gets redirected back from payment gateway.

5 Replies

Know the answer? Post it — somebody with the same question will find it here.

Midhun Tp10y ago
Hi,
Please refer below article for the same -
http://www.aspsnippets.com/Articles/ASPNet-Cookies-Read-Write-Save-and-Remove-Delete-Cookies-in-ASPNet-using-C-and-VBNet.aspx
Nikhil Srivastava10y ago
Plese post sample code how to read the cookies and set the cookies after checking it exist or not .
Midhun Tp10y ago
Then you have to use transaction id to create session for user. You will get userid from transaction id and create session for that userid in the response page, if session is expired. Don't know if it is good practice, but i think it is the feasible way.
Nikhil Srivastava10y ago
You are right I had already implemented the same logic for time being . We have to only update the txnid. Well I am using Payu and CCAVENUE gateway. I problem i am facing is that user gets logged out automatically when the payment gateway sends response bak to our web application. The user has to sign in again in order to view the order history or place a new order again .
Midhun Tp10y ago
Hi,

I don't know is there any good solution for this. But when i integrated payment gateway, i have used transaction number to identify the payment. Ofcourse, in my payment gateway, transaction id was a unique number which we can generate and pass to the payment gateway. So in the response, we get that transaction number too, with which we identifies the transaction. I don't know the working with your gateway. But if this was the case, you better go with my solution as you can't always depend on cookies or sessions as they can get expired.