Authentication in Asp.Net 2.0

[Miguel Dias Moura]

Hello,

I am working on my first Asp.Net 2.0 web site using VS2005.
I know about the login controls on Asp.Net 2.0 but they seem really
strict.
I would prefer to create my own forms and using the new Asp.Net 2.0
classes.

On this web site I need to have authentication for users.
I also need to set an access level for 4 types of users.
And I need to have an option such as "Remember Me".

Can someone tell me how to do this?

I have my Asp.Net 1.1 authentication code but I am having a few problems
in converting it to Asp.Net 2.0.

Thank You Very Much,
Miguel

My Asp.Net 1.1 Authentication Code is:

' Run Validation and Login
If Form_Validation () = True Then

' Forms Authentication Initialization
FormsAuthentica tion.Initialize ()

' Set Connection
Dim connectionStrin g As String =
System.Configur ation.Configura tionSettings.Ap pSettings("conn ectionString")
Dim dbConnection As System.Data.IDb Connection = New
System.Data.Ole Db.OleDbConnect ion(connectionS tring)

' Set Query
Dim queryString As String = "SELECT [t_4web_users].[access_level]
FROM [t_4web_users] WHERE (([t_4web_users].[username] = @page) AND
([t_4web_users].[password] = @password))"

' Set Command
Dim dbCommand As System.Data.IDb Command = New
System.Data.Ole Db.OleDbCommand
dbCommand.Comma ndText = queryString
dbCommand.Conne ction = dbConnection

' Add Parameters
With dbCommand.Param eters
.Add(New OleDbParameter( "@username" , tbusername.Text ))
.Add(New OleDbParameter( "@password" ,
FormsAuthentica tion.HashPasswo rdForStoringInC onfigFile(tbpas sword.Text,
"md5")))
End With

' Execute the Command
dbConnection.Op en()
Dim reader As OleDbDataReader = dbCommand.Execu teReader
If reader.Read Then
Dim ticket As FormsAuthentica tionTicket = New
FormsAuthentica tionTicket(1, tbusername.Text , DateTime.Now,
DateTime.Now.Ad dMinutes(30), True, reader.GetStrin g(0),
FormsAuthentica tion.FormsCooki ePath)
Dim hash As String = FormsAuthentica tion.Encrypt(ti cket)
Dim cookie As HttpCookie = New
HttpCookie(Form sAuthentication .FormsCookieNam e, hash)
If ticket.IsPersis tent Then
cookie.Expires = ticket.Expirati on
End If
Response.Cookie s.Add(cookie)
Dim returnUrl As String = Request.QuerySt ring("ReturnUrl ")
If returnUrl Is Nothing Then
returnUrl = "index4web.aspx "
End If
Login_Error_Mes sage("none")
Response.Redire ct(returnUrl)
Else
Login_Error_Mes sage("loginacce ssdenied")
End If
reader.Close()
dbConnection.Cl ose()

Else
End If

[Jeff]

Really Strict? You can manage how strict or "laid back" your authentication
process is simply by managing the entries in the web.config file.

Jeff

"Miguel Dias Moura" wrote:

Hello,

I am working on my first Asp.Net 2.0 web site using VS2005.
I know about the login controls on Asp.Net 2.0 but they seem really
strict.
I would prefer to create my own forms and using the new Asp.Net 2.0
classes.

On this web site I need to have authentication for users.
I also need to set an access level for 4 types of users.
And I need to have an option such as "Remember Me".

Can someone tell me how to do this?

I have my Asp.Net 1.1 authentication code but I am having a few problems
in converting it to Asp.Net 2.0.

Thank You Very Much,
Miguel

My Asp.Net 1.1 Authentication Code is:

' Run Validation and Login
If Form_Validation () = True Then

' Forms Authentication Initialization
FormsAuthentica tion.Initialize ()

' Set Connection
Dim connectionStrin g As String =
System.Configur ation.Configura tionSettings.Ap pSettings("conn ectionString")
Dim dbConnection As System.Data.IDb Connection = New
System.Data.Ole Db.OleDbConnect ion(connectionS tring)

' Set Query
Dim queryString As String = "SELECT [t_4web_users].[access_level]
FROM [t_4web_users] WHERE (([t_4web_users].[username] = @page) AND
([t_4web_users].[password] = @password))"

' Set Command
Dim dbCommand As System.Data.IDb Command = New
System.Data.Ole Db.OleDbCommand
dbCommand.Comma ndText = queryString
dbCommand.Conne ction = dbConnection

' Add Parameters
With dbCommand.Param eters
.Add(New OleDbParameter( "@username" , tbusername.Text ))
.Add(New OleDbParameter( "@password" ,
FormsAuthentica tion.HashPasswo rdForStoringInC onfigFile(tbpas sword.Text,
"md5")))
End With

' Execute the Command
dbConnection.Op en()
Dim reader As OleDbDataReader = dbCommand.Execu teReader
If reader.Read Then
Dim ticket As FormsAuthentica tionTicket = New
FormsAuthentica tionTicket(1, tbusername.Text , DateTime.Now,
DateTime.Now.Ad dMinutes(30), True, reader.GetStrin g(0),
FormsAuthentica tion.FormsCooki ePath)
Dim hash As String = FormsAuthentica tion.Encrypt(ti cket)
Dim cookie As HttpCookie = New
HttpCookie(Form sAuthentication .FormsCookieNam e, hash)
If ticket.IsPersis tent Then
cookie.Expires = ticket.Expirati on
End If
Response.Cookie s.Add(cookie)
Dim returnUrl As String = Request.QuerySt ring("ReturnUrl ")
If returnUrl Is Nothing Then
returnUrl = "index4web.aspx "
End If
Login_Error_Mes sage("none")
Response.Redire ct(returnUrl)
Else
Login_Error_Mes sage("loginacce ssdenied")
End If
reader.Close()
dbConnection.Cl ose()

Else
End If