membership-provider

Extend Membership API, MembershipUser

I created my own database schema to store user information. CREATE TABLE [dbo].[MyCustomMembership_Users]( [UserId] [uniqueidentifier] NOT NULL, [UserName] [nvarchar](256) NOT NULL, [LoweredUserName] [nvarchar](256) NOT NULL, [MobileAlias] [nvarchar](16) NULL, [IsAnonymous] [bit] NOT NULL, [LastActivityDate] [datetime] NOT NULL, [FirstN...

Why doesn't ValidateUser return more?

I'm using the standard .NET membership provider, and thought I'd see if someone could shine a light on it. Calling ValidateUser return either true or false. Now since the method accepts a username and password, one would reason that the return result would reflect an invalid username or password. Yet if we delve into it further, we find...

How do I create / use a MembershipProvider?

How do you create a MembershipProvider for use in an ASP.NET/MVC website? Doesn't it generate the tables it needs for you in your database? ...

Is it OK to go from Hashed to Encrypted password type in an ASP.NET membership provider?

I've have an asp.net web app, forms authentication, that's uses Hashed password type. Will I run across any problems if I change the password type to Encrypted? I see that, if I change to Encrypted, attempted password recovery for old hashed passwords fails gracefully, which is good. Are there any not so good things that might show up ...

Membership, MembershipProvider and MembershipUser relations in ASP.NET?

I store user data in a MSSQL table called Users. What I want to is to have accessible all user's data for actually logged user (email, address, phone, if the user is subscriber etc.). I don't want to use profiles so I decided to use custom MembershipProvider (or do you know some better, less painful way?). What I don't understand is Me...

asp.net membership provider compromised?

I'm using the standard out-of-the-box aspnet membership provider, and I have the following settings in the web.config: <anonymousIdentification enabled="false"/> <authentication mode="Forms"> <forms cookieless="AutoDetect" loginUrl="~/XXXX.aspx" name="XXXXAuth" slidingExpiration="true" timeout="432000"/> </authentication> ... <membe...

Creating a Facade over Membership Provider

I am using the Membership Provider in ASP.NET MVC and for most data access I use nHibernate and a repository pattern. Do you recommend using a Facade over the Membership Provider so I can create a repository and make it operate a bit more inline with the rest of my entity model? I also have added additional functionality like the ability...

MembershipCreateStatus.InvalidEmail being reached with valid email addresses.

Using the .NET Membership Provider and trying to re-create an Add User page which has been used by other developers (the actual developer has left my company). But while most things work, like editing users, I can't add a new user because this wizard is marking all emails as invalid. I don't know how to update the configuration of the pr...

asp.net mvc and custom membership and role providers

My question, is it possible to build customer membership and role providers (overriding the asp.net providers) when using asp.net mvc? I am guessing it is possible but have not seen any information about it. Would it be done the same way as in asp.net? Just changing the web.config to point to a new provider and then providing the over...

AspNetSqlMembershipProvider and PasswordRecovery Control

Hi, My scenario is I have a asp.net 2.0 application web application which had the AspNetSqlMembershipProvider properties as: enablePasswordRetrieval="false" and passwordFormat="Hashed" But now the need has risen to store user's passwords unencrypted as clear text and display them to Superusers. I have done this by changing the AspNetSq...

Using SQL server 2008 for ASP .net 2.0 Membership provider

Hello all I tried to set-up the SQL tables for ASP .net 2.0 membership provider by clicking on ASP.net Configuration under Project. I have completely uninstalled SQL 2005 Express and installed SQL 2008 Express instead. It seems like that it can not connect to the database. Does anybody know how to get this fixed so I can use 2008 in...

ASP.Net membership validating users created manually

I am manually creating users in my asp.net user tables with the membership.creatuser(). Is there an easy way to test to make sure the account is created and or valid after I create it? MembershipCreateStatus status = new MembershipCreateStatus(); Membership.CreateUser(user.FirstName + user.LastName, user.Passw...

User Authentication in ASP.NET with user data not even readable by admin or man-in-the-middle

Hello, Imagine you have an ASP.NET based website that users have to authenticate for to get access. The user data (such as username, password and other information relevant for the website) is stored in a Microsoft Sql database. I know that it is possible to write an custom membership provider to create an own authentication method. H...

How to use Secret Answer in .NET with Membership.Provider

I am using the Membership.Provider for security in my MVC Application. I have a forgot password page that asks for your username, and then gives you the secret question on file. My question is how to a check the secret answer against what is on file. I can't seem to find any method that does that besides Membership.Provider.ResetPasswo...

Why does my asp.net membership login page not work with a redirect?

I have this membership site setup on my local machine using the ASP.NET membership provider. When I go to: http://localhost/admin/ It redirects me to http://localhost/Login.aspx?ReturnUrl=%2fadmin%2fDefault.aspx Which is fine. But after I put in my login information, the page just seems to refresh. It doesn't actually log me in, ...

ASP.NET Membership Provider - Validate Hashed Security Question/Answer

On a page I'm adding retrieve forgotten USERNAME Step 1) Enter email address (Get account by email) Step 2) Verify Security Question (they provide answer and I validate it) Step 3) Send them an email with username Step 2 is where I'm stuck. How do I validate the answer with what's stored in the database? All values are hashed. I se...

How do you refer to a membership provider user in a SQL table?

When I create SQL tables and I want to refer to a membership provider user in ASP.NET, what type of field do I use and how do I get the value from the user? ...

Asp.net: Custom Role and Membership Provider, LoginStatus Control not reacting

Hi All Involved in a project where one half of the team are building the db and web services layer and we are builing a separate, front end, web service consuming site. We are building a custom role and membership provider which will operate via the web services layer. Just doing some early prototyping, setting roles, checking page pe...

Implementing a Custom Membership Provider with slightly bizarre requirements

Building a new Mobile Web Platform for Mobile Users to purchase & download content on their handsets. In the past we've used a completely bespoke login mechanism but I'm investigating using a Custom Membership Provider for the next version of the Platform. The thing is, we have some slightly odd "login" mechanism requirements, so I'm no...

ASP.NET MVC MembershipService Email

I have been working on an MVC project and I everything works at the moment except I can't force the user to confirm the email address before I active the user's account. I am using the built-in MembershipService/MembershipProvider that came with MVC. I was thinking of sending a normal email using an SmtpClient and MailMessage and then m...