Form Authentication Ticket to Store additional User Data

[beemomo]

I am trying to implement login page using Form Authentication in ASP.net using vb code.I follow the steps in How To Implement Forms-Based Authentication in Your ASP.NET Application by Using Visual Basic .NET. I created a function in login page :

Private Function ValidateUser(ByVal strUsername As String, ByVal strPassword As String) As Boolean
 

and call it in btnLogIn_Click

Protected Sub btnLogIn_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles btnLogIn.Click
        If ValidateUser(txtUserName.Text, txtPassword.Text) Then
            Dim tkt As FormsAuthenticationTicket
            Dim strCookie As String
            Dim ck As HttpCookie
 
            tkt = New FormsAuthenticationTicket(1, txtUserName.Text, DateTime.Now(), _
                  DateTime.Now.AddMinutes(30), chkPersistCookie.Checked, "my user data")
            strCookie = FormsAuthentication.Encrypt(tkt)
            ck = New HttpCookie(FormsAuthentication.FormsCookieName(), strCookie)
            If (chkPersistCookie.Checked) Then ck.Expires = tkt.Expiration
            ck.Path = FormsAuthentication.FormsCookiePath()
            Response.Cookies.Add(ck)
 
            Dim strRedirect As String
            strRedirect = "MaintainUsers.aspx"
            Response.Redirect(strRedirect, True)
 
        Else
            Response.Redirect("Login.aspx", True)
        End If
    End Sub
 
 

and in masterpage page_load , the usename is displayed in the welcome message

Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
     If HttpContext.Current.User.Identity.IsAuthenticated Then
          Me.lblWelcomeMessage.Text = "Welcome," + " " + HttpContext.Current.User.Identity.Name
     End If
End Sub
 

Things works fine and i can get the username display in label.

However,I need to get more user data like UserName, Fullname and RoleCode. Also, i would to display the user's fullname to instead of usename in welcome message. I was told this can be done using FormsAuthenticationTicket method to store addictional user data in the "my user data" section. Do i need to create a user data class to store the user data and then use it in the FormAuthenticationTicket? If yes, how should i do it? I have been scratching my head several days in googling to get a proper guide to do this,but i still cannot find out the solution.

Please can anyone help me? I am quite lost now , your help is much appreciated. Thank you.

[beemomo]

Dear all,

I manage to store the additional use data (username, fullname, rolecode) in FormAuthenticationTicket. However ,
the user has more than one role , he can be admin, poweruser , executive ,etc... can anyone please tell me how can i concatenate the rodecode return by datareader if it returns more than 1 value? so that i can put it as a string in userdatastring of the authentication ticket?

drDataReader = cmd.ExecuteReader()
While drDataReader.Read()
 
strFullName = drDataReader("FullName").ToString
strUserName = drDataReader("UserName").ToString
strRoleCode = drDataReader("RoleCode").ToString
 
userDataString = String.Concat(strFullName, "|", strUserName, "|", strRoleCode)
 
Dim authCookie As HttpCookie = FormsAuthentication.GetAuthCookie(txtUserName.Text, chkPersistCookie.Checked)
 
Dim ticket As FormsAuthenticationTicket = FormsAuthentication.Decrypt(authCookie.Value)
 
Dim newTicket As FormsAuthenticationTicket = New FormsAuthenticationTicket(ticket.Version, ticket.Name, ticket.IssueDate, ticket.Expiration, ticket.IsPersistent, userDataString)
 
' Update the authCookie's Value to use the encrypted version of newTicket
 
authCookie.Value = FormsAuthentication.Encrypt(newTicket)
 
' Manually add the authCookie to the Cookies collection
Response.Cookies.Add(authCookie)
 
' Determine redirect URL and send user there
Dim strRedirect As String
strRedirect = "MainTainUsers.aspx"
Response.Redirect(strRedirect, True)
End While