I was making a role-based authentication but it does't login with
correct password.
the HttpContext.Cur rent.User recieved in Global.asax is always null.
Request.IsAuthe nticated is always false.
in the cs files, i write the code below
protected void SubmitBtn_Click (Object sender, EventArgs e)
{
if (Authenticate(U serName.Text, Password.Text))
{
FormsAuthentica tion.Initialize ();
SqlConnection dsn = new
SqlConnection(C onfigurationSet tings.AppSettin gs["conn"]);
string SqlStr = "select IsAdmin from systeacherList where
teacherAccount = @UserId";
SqlCommand myCommand = new SqlCommand(SqlS tr,dsn);
dsn.Open();
SqlParameter myUserId = new SqlParameter("@ UserId",
SqlDbType.NVarC har, 20);
myUserId.Value = UserName.Text.T rim();
myCommand.Param eters.Add(myUse rId);
bool bIsAdmin =
Convert.ToBoole an(myCommand.Ex ecuteScalar().T oString());
dsn.Close();
string strRole = "";
string strDefault = "";
if(bIsAdmin)
{
strRole = "Admin";
strDefault = "/iPage/Admin/adminindex.aspx ";
}
else
{
strRole = "Teacher";
strDefault = "/iPage/Admin/digitaladmin.as px";
Session["TeacherID"]=teacherID;
}
//The AddMinutes determines how long the user will be logged in
after leaving
//the site if he doesn't log off.
FormsAuthentica tionTicket fat = new FormsAuthentica tionTicket(1,
UserName.Text, DateTime.Now,
DateTime.Now.Ad dMinutes(30), true, strRole,
FormsAuthentica tion.FormsCooki ePath);
HttpContext.Cur rent.Response.C ookies.Add(new
HttpCookie(Form sAuthentication .FormsCookieNam e,
FormsAuthentica tion.Encrypt(fa t)));
FormsAuthentica tion.SetAuthCoo kie(UserName.Te xt,true);
//Cache.Add(UserN ame.Text,strRol e,null,DateTime .MaxValue,TimeS pan.FromHours(1 ),CacheItemPrio rity.BelowNorma l,null);
string strRedirect =
FormsAuthentica tion.GetRedirec tUrl(UserName.T ext,true);
if(strRedirect= ="/iPage/default.aspx")
Response.Redire ct(strDefault);
else
Response.Redire ct(strRedirect) ;
}
else
{
ErrorMsg.Visibl e = true;
}
}
the web.config file of subdir i wanted to protected is
<configuratio n>
<location path="digitalad min.aspx">
<system.web>
<authenticati on mode="Forms">
<forms name="iPage" loginUrl="/iPage/Login.aspx" />
</authentication>
<authorizatio n>
<allow roles="Admin" />
<allow roles="Teacher" />
<deny users="*" />
</authorization>
</system.web>
</location>
<system.web>
<authenticati on mode="Forms">
<forms name="iPage" loginUrl="/iPage/Login.aspx" />
</authentication>
<authorizatio n>
<allow roles="Admin" />
<allow users="Archer"/>
<deny users="*" />
</authorization>
</system.web>
</configuration>
and the Application_Aut henticateReques t in Global.asax.cs is
if (!(HttpContext. Current.User == null))
{
if (HttpContext.Cu rrent.User.Iden tity.IsAuthenti cated)
{
if (HttpContext.Cu rrent.User.Iden tity.GetType() ==
typeof(FormsIde ntity))
{
FormsIdentity fi = (FormsIdentity)
HttpContext.Cur rent.User.Ident ity;
FormsAuthentica tionTicket fat = fi.Ticket;
String[] astrRoles = fat.UserData.Sp lit('|');
HttpContext.Cur rent.User = new GenericPrincipa l(fi, astrRoles);
}
}
}
any help would be appreciate!
