ASP.NET Web Server
Using Visual Studio
ASP.NET Image Effects
DB Design tips
Design Secure Apps
Build Secure Apps
1. What is ASP.NET User Authentication
Today many web applications requires that the user register with the system and log in, before they start to use the application.
If you take the Shopping Cart application, it requires the use to log in to before they complete a purchase thus making sure that the application knows who is purchasing the items, who to ship the items to, and whom to send the bills to. The community applications like the forums and blogs also require a user to log in before they start to post content to the application. There are applications which require the user to log in even before the user can view any page in the application. There are some application which have pages that can be viewed anonymously an other that require a log in like in an online store which might allow usrs to view a catalog and add items to a shopping cart without loggin in, but require a login to complete a purchase, and if you take a forum or a blog, it might allow anyone to view other users’ posts but will require a user to log in to make a post of their own.
Today there are some applications that have more than one type of user too.
Most of the users of the shopping cart application can view the company’s product and add items to a shopping cart, and make purchases, but these users cannot make any changes to the items in the Products database. This is only allowed to usrs of type administrator. This is the same for forums, which have noremal users who can post blogs and moderators who can manage posts or even ban abusive users.
When talking about security, there are two aspects of user registration and login secrutiy in ASP.NET, and they are:
The following are the subtopics in this section:
Table of Contents
» Chapter 1 - What is ASP.NET User Authentication