So, i am implementing authentification in my app. Creditianals stored in xml files(not real project).
Here is code:
public ActionResult Login(LoginModel model, string returnUrl)
{
if (ModelState.IsValid && Membership.ValidateUser(model.UserName, model.Password))
{
FormsAuthentication.SetAuthCookie(model.UserName, model.RememberMe);
return RedirectToAction("Index", "Objects", new ObjectsModel(//user name));
}
// If we got this far, something failed, redisplay form
ModelState.AddModelError("", "The user name or password provided is incorrect.");
return View(model);
}
public class CustomMembershipProvider : SimpleMembershipProvider
{
public override bool ValidateUser(string username, string password)
{
return true;
}
}
[Authorize]
public class ObjectsController : Controller
{
public ActionResult Index()
{
return View(new ObjectsModel(//get authentificated username));
}
}
Two questions:
- Am i doing it right? Or i must use WebSecurity etc. And is it enough for secure app? Or i have great misunderstanding of whole staff?
- How i can get loged in UserName in ObjectsController(commented line)?