I am developing a custom shopping cart for which existing customers will need to log in to access their account.
I am trying to decide if ASP.NET membership is appropriate for all or part of the application.
- It certainly makes sense for existing customers - you log in and get access to your order history and can make changes to your settings. Every page must be authenticated and if you lose that authentication cookie then you get logged out.
- However for new customers they won't have an account until the last step so I'm not quite sure how ASP.NET membership would fit into that situation. Would I just create the user account but not actually require authentication on all the pages?
Can someone for whom this is obvious please comment