Authentication pattern .Net

Question

I am planning to create a component that will be able to check user's credentials (username and password) and, if they are valid, return associated profiles. I don't want to use the providers that already exist in the .Net framework (I am trying to exercise my development skills ). Is there any pattern I can use? Or standards?

Answer 1

The providers that .Net supply are all derrived from System.Web.Security.MembershipProvider.

The best pattern you could follow is to write your own class that derives from Membership provider. That way you can write your own Authentication mechanism without having to worry about the security plumbing involved with checking authentication for every request.