To implement a very simple authentication in MVC where
authentication is done using values stored in web.config files follow these
steps.
1) Create a folder Identity and create classes CustomSignInManager,
CustomUser, CustomUserManager and CustomUserStore
CustomSignInManager
class has the following code:
public class CustomSignInManager : SignInManager<CustomUser, string>
{
public
CustomSignInManager(CustomUserManager userManager, IAuthenticationManager
authenticationManager)
: base(userManager,
authenticationManager)
{
}
public static CustomSignInManager
Create(IdentityFactoryOptions<CustomSignInManager> options, IOwinContext
context)
{
return new
CustomSignInManager(context.GetUserManager<CustomUserManager>(),
context.Authentication);
}
public override
Task<SignInStatus> PasswordSignInAsync(string userName, string password, bool isPersistent, bool shouldLockout)
{
//return
base.PasswordSignInAsync(userName, password, isPersistent, shouldLockout);
var signInStatus =
SignInStatus.Failure;
if
(ConfigurationManager.AppSettings["UserName"].Trim().ToLower() ==
userName.Trim().ToLower() && ConfigurationManager.AppSettings["Password"] == password)
{
signInStatus
= SignInStatus.Success;
}
return
Task.FromResult(signInStatus);
}
}
CustomUser
class has the following code:
public class CustomUser : IUser<string>
{
public string Id { get; set; }
public string UserName { get; set; }
public string UserRole { get; set; }
}
CustomUserManager
class has the following code:
public class CustomUserManager : UserManager<CustomUser>
{
public
CustomUserManager(IUserStore<CustomUser> store) : base(store)
{
}
public static CustomUserManager
Create()
{
var manager = new CustomUserManager(new CustomUserStore());
return manager;
}
}
CustomUserStore
class has the following code:
public class CustomUserStore : IUserStore<CustomUser>
{
public CustomUserStore()
{
//this.database = new
CustomDbContext();
}
public void Dispose()
{
//this.database.Dispose();
}
public Task
CreateAsync(CustomUser user)
{
// TODO
throw new
NotImplementedException();
}
public Task
UpdateAsync(CustomUser user)
{
// TODO
throw new
NotImplementedException();
}
public Task
DeleteAsync(CustomUser user)
{
// TODO
throw new
NotImplementedException();
}
public async Task<CustomUser>
FindByIdAsync(string userId)
{
await Task.Delay(0);
return new CustomUser();
}
public async
Task<CustomUser> FindByNameAsync(string userName)
{
await Task.Delay(0);
return new CustomUser();
}
}
Add
a property CustomSignInManager to AccountsController
public CustomSignInManager CustomSignInManager
{
get { return _signInManager ??
HttpContext.GetOwinContext().Get<CustomSignInManager>(); }
private set { _signInManager =
value; }
}
Login
method in AccountsController class has the following code:
if (!ModelState.IsValid)
{
return View(model);
}
//Authenticate the
user
var result = await
CustomSignInManager.PasswordSignInAsync(model.Email, model.Password,
model.RememberMe, shouldLockout: false);
switch (result)
{
case SignInStatus.Success:
var user = new CustomUser() {Id= "1", UserName =
model.Email };
await
CustomSignInManager.SignInAsync(user, model.RememberMe, false);
return
RedirectToLocal(returnUrl);
case
SignInStatus.LockedOut:
return View("Lockout");
case
SignInStatus.RequiresVerification:
return RedirectToAction("SendCode", new { ReturnUrl =
returnUrl, RememberMe = model.RememberMe });
case SignInStatus.Failure:
default:
ModelState.AddModelError("", "Invalid login attempt.");
return View(model);
}
