Authenticate a USER in Asp.net MVC 5 without password

Question

I want to authenticate a user with only user name and no password. My application does not have any user management data and I just want to create Identity with user details so that I can use it in the application.

I tried to copy the SingInAsync method to put this up

    private async Task InitializeUser()
    {
        var user = new ApplicationUser();
        user.Id = "abcd";
        user.UserName = "abcd";

        AuthenticationManager.SignOut(DefaultAuthenticationTypes.ExternalCookie);
        var identity = await UserManager.CreateIdentityAsync(user, DefaultAuthenticationTypes.ApplicationCookie);
        AuthenticationManager.SignIn(new AuthenticationProperties() { IsPersistent = false }, identity);
    }

But it tells me and error - that user ID cannot be found. Is there someway I can just authenticate the user by username and assign the Identity with some details??

I suppose you could just hardcode a single dummy password for everyone - though it seems silly to use Identity without the need to authenticate. — wahwahwah
– wahwahwah, Commented May 8, 2015 at 14:36
Thanks!! My user is already authenticated since this app is running under an Iframe. But I still want to set the identity so that I can use those user details through out my application. Any other ideas of doing this?? — Prashant
– Prashant, Commented May 8, 2015 at 14:37
A better solution would be to have you're app running in the iframe provide some form of credentials showing the user has been authenticated... maybe oAuth? — wahwahwah
– wahwahwah, Commented May 8, 2015 at 14:39
I tried to find and read about custom Oauth but did not get enough information. Found a nice article but it only talks about middleware using Facebook. Anybody know of any ways or articles I can read about Custom OAuth?? — Prashant
– Prashant, Commented May 8, 2015 at 16:53

jimSampica · Accepted Answer · 2015-05-09 06:02:53Z

2

With no users just forget about the UserManager and create the ClaimsIdentity yourself.

private async Task InitializeUser()
{
    var user = new ApplicationUser();
    user.Id = "abcd";
    user.UserName = "abcd";

    AuthenticationManager.SignOut(DefaultAuthenticationTypes.ApplicationCookie);

    var id = new ClaimsIdentity(DefaultAuthenticationTypes.ApplicationCookie, ClaimsIdentity.DefaultNameClaimType, ClaimsIdentity.DefaultRoleClaimType);
    id.AddClaim(new Claim("http://schemas.microsoft.com/accesscontrolservice/2010/07/claims/identityprovider", "ASP.NET Identity", ClaimValueTypes.String));
    id.AddClaim(new Claim(ClaimsIdentity.DefaultNameClaimType, user.UserName, ClaimValueTypes.String));
    id.AddClaim(new Claim(ClaimTypes.NameIdentifier, user.Id, ClaimValueTypes.String));

    AuthenticationManager.SignIn(new AuthenticationProperties() { IsPersistent = false }, id);
}

You probably want to tweak this a bit to make it cleaner.

answered May 9, 2015 at 6:02

jimSampica

12.5k3 gold badges69 silver badges87 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Nelson Rodriguez Over a year ago

This is exactly what I needed to authenticate with a different mechanism than Entity Framework. I already had an authentication mechanism and I only needed to migrate to Owin. So this saved me the time to create user store and user manager which I don't need.

Collectives™ on Stack Overflow

Authenticate a USER in Asp.net MVC 5 without password

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related