Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

New site creation and security/authentication,- should I use ASP.net Membership Provider?

There seem to many ways to skin this particular cat - but which is the best and easiest to implement. It would seem that the ASP.net Membership Provider is the one that will save more time, so my questions are:

  1. What are the pros/cons of Membership?
  2. How do you integrate the auto generated user db with your own custom made db? e.g customers/orders/products db. (We are talking MS Sql here BTW)
  3. Where can I find a good tutorial thats up do date?

Many thanks.

like image 748
Vidar Avatar asked Oct 02 '08 12:10

Vidar


People also ask

What is asp net membership provider?

The ASP.NET membership provider is a feature that enables ASP.NET developers to create Web sites that allow users to create unique user name and password combinations. With this facility, any user can establish an account with the site, and sign in for exclusive access to the site and its services.

What protection is required for form authentication in .NET security?

Protecting static file types using forms authentication By default, forms authentication protects only ASPX pages and any other . NET extensions. You can configure forms authentication to protect other static extensions such as .

How does ASP.NET authentication work?

Forms authentication flow: When a user requests a page for the application, ASP.NET checks session cookie. If the cookie exists and valid, ASP.NET assumes the user is authenticated and processes the request. If session cookies does not exists or not valid then it redirect to login form.

How many types of authentication are there in ASP.NET Core?

Authentication : It is the process of ensuring the user's identity and authenticity. ASP.NET allows four types of authentications: Windows Authentication.


1 Answers

Membership is lightweight and easy to set up. You can also use the various providers to use Active Directory or some other member location.

You shouldn't need to integrate the databases, you can use one to authenticate users and then as long as they are valid, go query another database for the data. This is a good way to keep information seperate for security reasons.

For a good tutorial, I'd suggest: http://msdn.microsoft.com/en-us/library/yh26yfzy.aspx

And if you want to create your own membership provider: http://www.asp.net/learn/videos/video-189.aspx

like image 177
Tom Avatar answered Oct 17 '22 17:10

Tom