asp.net-membership

MembershipProvider and PasswordRecovery control

Hi, I need help using the PasswordRecovery control in .net 2.0. My situation is the application has changed from storing the passwordformat in Hashed to Clear. The problem is the newly created users have a clear password stored and there are still users with hashed passwords. When I use the passwordRecovery control as below for users w...

ASP.NET forms authentication - auto login with a test account while debugging?

I have a web application that uses the asp.net membership and role providers to allow logins that are members of certain roles to have access to various pages depending on role assignments. During debugging I'd like the app to log in automatically with a test account, so I can check the functionality of the role assignments, and not h...

ASP.NET SqlMembership Provider Scalability

I've got an upcoming project that is going to be dealing with 70,000+ users (education). I was wondering if the ASP.NET SqlMembership Provider has been used at such large capacities? Assuming the hardware is there, is there anything special that needs to be done to make it work smoothly? We're doing all the obvious things like separat...

How do I create an Authentication Cookie in a custom MembershipProvider?

I'm trying to create a custom MembershipProvider and I was wondering how I would add my user information to the Authentication Cookie that ASP.NET uses. My goal is to get my authentication to work for both the website and the WCF service with ASP.NET Compabatibility mode enabled. ...

ASP.NET Login control, how to query user-specific data

Hi, I have installed a Login control in ASP.NET/C# in login.aspx and after the user has logged in, it takes him to the member.aspx page. All works perfectly fine but what should I do if I want to query a database for some user-specific data? How would I do that? ASPNETDB.MDF is the database, I have created another table with some addit...

What initializes the security context in forms authentication?

If FormsAuthenticationModule detects forms authentication ticket in the request, it automatically creates security context by initializing HttpContext.Current.User property. This happens during Application.AuthenticateRequest event. Assuming we log in user via CreateUserWizard control, then by the time CreatUserWizard's ContinueButtonCl...

Added ( to CreateUserWizard control ) additional wizard steps after CreateUserWizardStep and CompleteWizardStep, but they don't get displayed

Hello, I'd like to add ( to CreateUserWizard control ) additional wizard steps after CreateUserWizardStep and CompleteWizardStep, but when clicking on ContinueButton in CompleteWizardStep, instead of being forwarded to next wizard step, nothing happens! What am i doing wrong? thanx EDIT: <asp:CreateUserWizard ID="CreateU...

How to connect Calendar control with existing Membership system in ASP.NET?

Hi, I have a built-in Membership system in ASP.NET and I handle member data with Profiles in web.config. I would like to add an Event Calendar where a member could add notes to any day he wants but I don't know how to integrate the Calendar control with the existing Membership system. I can't query a database because I don't handle me...

Storing ASP.net membership and openid users in a new user table

In order to store user information from people who login with OpenId I plan on creating a user table. My problem is that this new user table will contain new fields that I want the asp.net membership users to be able to fill in too (profile data). My plan is when a user wants a username and password, they register and the information i...

ASP.NET MVC Membership Reserve

I want to be able to prevent users from registering using specific usernames such as "Admin", "Administrator" etc. Does the MVC MembershipService have a way of doing this or will I have to implement my own method to check each time a user registers? Thanks TheLorax ...

Profilesystem / Membershipsystem with Email as login

The ASP.NET Membershipsystem uses a unique username to identify a user. What if I need to login users by E-Mail? I could just pass the E-Mail into the property for the username, but then things get a bit messy. The user might want to change the e-mailaddress. Is there any resource available that decribes a good way to implement it? ...

<MailDefinition> and <%%> placeholders

Hello, <asp:CreateUserWizard> ... <MailDefinition BodyFileName="~/RegistrationMail.txt" From="[email protected]" Subject="new account"> </MailDefinition> BodyFileName attribute references disk file containing mail's body text. If we put placeholders <% UserName %> and <% Password %> in the body text fi...

Custom Authroization w/MVC

I am writing a web app using MVC and the first page will be a login screen. What is the best way to setup an authorization off of this first page to provide authorization for the entire session. The login information will be held in a database which will be half pulled from an HR db and an AD db. Thanks ...

CreateUserWizard can't send email (via gmail) due SmtpClient.SslStream being set to false

Hello, I’d like for CreateUserWizard control to send email notifications to created users. Since I don’t host my own SMTP server, I tried to use my gmail account to send those notifications, but I kept getting “Must issue STARTTLS command first”. One site suggests this is due to CreateUserWizard’s SmtpClient using System.Net.Sockets....

Proper 100% IsOnline implementation for asp.net membership

Hey guys I have to design a CMS where a set of credentials can only be used once. So if a user has logged in from his computer, no-one can login with his credentials from another location until that user logs out. Now using the asp.net membership provider out the box, the IsOnline method returns a boolean that reflects the timeout wind...

ASP.NET MVC Futures RequireSSL Attribute and Authorize Attribute Together

Is anyone successfully using both the Authorize and RequireSSL (from MVC futures) attributes together on a controller? I have created a controller for which I must enforce the rule that the user must be logged in and using a secure connection in order to execute. If the user is not on a secure connection, I want the app to redirect to ...

ASP.NET Membership & GridViews

I have a site using ASP.NET Membership and have a number of roles that users are assigned to. One feature I really want to do is to be able to programatically add the "edit" or "delete" buttons to rows in a GridView, based on the role the user is a member of. For example: If the user is an admin I want to show the edit and delete butto...

asp.net default account ids

Hi. How does the default template for asp.net mvc store accounts (the AccountController)? Can I add unique numbered ids, since so far I have found out, that it uses unique login as primarz key? Is there a table containing these accounts? And which classes should I look for to work with them? Thanks in advance. ...

Can you switch off the schema check performed by ASPNET providers

We have created a custom membership provider, but we have inherited the Role and Profile providers. The problem we are having is there appears to be calls being made to aspnet_CheckSchemaVersion by the providers - I assume its the Role or Profile provider as our membership provider isnt inherited and we don't call the db. Is there a way...

How to use the deny all with membership provider and MVC

I'm writing my first MVC app that uses the membership provider and I noticed that after I login and it is successful - it won't transfer me to the default url (and i can't view any url other than the logon view) so it appears i'm not actually authenticated for some odd reason. Here is part of the web.config - anything I might be doing w...