.NET Answers

I’ve had several occasions in the past where I’ve needed to do my own authentication or I’ve needed to add some additional methods to the authentication process.

As easy as Microsoft has made the authentication process, you might think that in order to  manually authenticate you’d need to write all of your authentication code manually.  But nothing could be farther from the truth.

In fact, most of the time all you need to do is trap an event handler in the existing login control.

A couple of years ago, I was asked to create a login page that used a web service to authenticate the user.  I also needed to add another form field to the login screen, so it became obvious that to do this I’d need to turn the login control into a templated control.

Once this was done it was a simple matter to trap the click event of the login button, authenticate against the web service, and then set the authentication cookie for ASP.NET.

Since I can’t show you how to authenticate against the service–your implementation will almost certainly be different–we will skip that section.  But to set the cookie, all we need to do is to revert to the ASP.NET 1.1 way of setting up the login.

if (Request.QueryString["ReturnUrl"] != null)
{
    FormsAuthentication.RedirectFromLoginPage        (m_tbUsername.Text, persistentCookie);
}
else
{
    FormsAuthentication.SetAuthCookie        (m_tbUsername.Text, persistentCookie);
    Response.Redirect("~/");
}

The first line checks to see if there was a Return URL specified.  If there was we can use the RedirectFromLoginPage API.  Otherwise, we need to set the Authentication Cookie manually and redirect on our  own.

The persistentCookie parameter is true if we want the user to always be logged in.  Otherwise, the login is for the session.

Other Related Items:

Nettool Series II Monitoring and Authentication OptionNETTOOL SERIES 2 MONT AUTHENTICATION OPT

Lost Christianities: Christian Scriptures and the Battles Over Authentication

Howie Long Signed Raiders Pro Riddell f/s HelmetHowie Long has signed this Oakland Raiders Riddell Full-Size Authentic Proline helmet. This was signed a private signing and comes with a certificate of authenticity (COA) from James Spence Authentication who witnessed the signature.

Related Post

• ASP.NET Authentication – Multiple Domains w/ Same Application
• Authentication – Assigning Permissions to Roles
• ASP.NET Assigning a Role to a User
• Determine The Role of a User in ASP.NET

Bookmark to:

Hide Sites

One Response to “Forms Authentication – Manual Authentication”