c# - What is the first global.asax event that Session is accessible assuming the context handler is IRequiresSessionState or IReadOnlySessionState?

Question

My app sometimes calls Server.Transfer in the Application_OnPostAuthenticateRequest event of the global.asax to act as kind of url rewite. When this happens and I need to access Session I get an HttpException: "Session state can only be used when enableSessionState is set to true..." I am assuming this is happening because of the event I am calling Server.Transfer. Is that why I am getting the exception? When should I do the transfer?

Answer 1

The PostAuthenticateRequest occurs before the AcquireRequestState and the session state should only be available after this event is raised, so if you need to access session state for the request you need to wait for that event.

See this page as a reference.

1. ...
2. Raise the PostAuthenticateRequest event.
3. ...
4. Raise the AcquireRequestState event.
5. ...