Reasons for not using JQuery to Log in user?

Question

Im using asp.net mvc and form to log in user. I am wondering if there is any issue with using jquery to log in user instead and what I should be concerned about in terms of security as well. thanks

EDIT: I ONLY MEAN PASSING THE USERNAME AND PASSWORD TO THE MVC CONTROLLER. THE SITE USES A LOT OF JAVASCRIPT.

Answer 1

In 99% of web applications JS should always give some extra (additional) functionality or take control over basic functionality (like log in, send a message etc.). But this basic functionality should not rely only on JS.

Remember that there is a small group of users who don't use JavaScript, or use browsers that don't support it at all, and they shouldn't be ignored.

Answer 2

jQuery will not handle authentication, it would only serve as an intermediary, passing, say, username and password to your authentication code inside your application. There's no harm in having jQuery manipulate a login screen or whatever, but in the end, server side code will be what logs a user in.

EDIT: Any JavaScript you include on your site, jQuery or not, will need to be vetted for security. Have a look at this slide deck: Douglas Crockford: Ajax Security to get an overview of the issues. Security is a process though, and you need also to look at your server side code to assure it also is meeting your expectations with regard to security.

Answer 3

I would look at hashing the password before sending it to the server.

Then you check the username and hashed password against the username and hashed password in the db (since you shouldn't store passwords in cleartext anyway).