Custom Authentication .Net MVC

Question

I have a web app that allows a user to pay for a holiday booking.

The user will log in using a combination of a unique booking ID and a booking password.

Is there a simple way I can authenticate the user once they have successfully logged in. Is it a good idea to use the .net session object for this purpose?

The app wont be load balanced so I don't need to worry about storing session across different machines.

I would like to not have to use .Net membership as I don't want to create any extra tables in the database.

Jelle Oosterbosch · Accepted Answer · 2015-11-19 09:58:34Z

2

If you are able to retrieve the user, I guess this is possible. Below is the way I would try:

public ActionResult UrlAuth(string bookingId, string bookingPass)
{
    var userManager=HttpContext.GetOwinContext().GetUserManager<ApplicationUserManager>();

    // Retrieve the user by the give booking values (Custom part in your app
    string userId= _bookingRepository.GetUserIdByBooking(bookingId, bookinggPass);

    var user = userManager.FindById(userId);
    if (user != null)
    {
        var userIdentity = userManager.CreateIdentity(user, DefaultAuthenticationTypes.ApplicationCookie);

        HttpContext.GetOwinContext().Authentication.SignIn(new AuthenticationProperties { IsPersistent = false }, userIdentity );

        // authentication succeed do what you want 
        return Redirect("Wherever");
    }

    ModelState.AddModelError("", "Invalid booking values");

    return View();
}

answered Nov 19, 2015 at 9:58

Jelle Oosterbosch

1,74215 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Wesley Skeen Over a year ago

Thanks. This helped a lot

ANJYR · Accepted Answer · 2015-11-19 12:32:11Z

1

Here's a good general article with custom authentication for MVC

http://www.ryadel.com/en/http-basic-authentication-asp-net-mvc-using-custom-actionfilter/

http://www.codeproject.com/Articles/1005485/RESTful-Day-sharp-Security-in-Web-APIs-Basic

answered Nov 19, 2015 at 12:32

ANJYR

2,6216 gold badges43 silver badges62 bronze badges

Collectives™ on Stack Overflow

Custom Authentication .Net MVC

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related